CVE-2000-0640 Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or n...
HighCVSS 7.5
EPSS 7.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| steve poulsen guildftpd | = 0.9.7 | No fix listed |
References
- 20000708 gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd exploit mailing-list patch vendor-advisory
- 573 vdb-entry
- 1452 exploit vdb-entry vendor-advisory
- guild-ftpd-disclosure(4922) vdb-entry