CVE-2001-0054 Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant o...
MediumCVSS 5.0
EPSS 12.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. (dot dot) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds serv-u file server | = 3.0.0.16 | No fix listed |
References
- 20001205 (no subject) mailing-list patch vendor-advisory
- 20001205 Serv-U FTP directory traversal vunerability (all versions) mailing-list
- 464 vdb-entry
- 2052 exploit patch vdb-entry vendor-advisory
- ftp-servu-homedir-travers(5639) vdb-entry