CVE-2001-0263 Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not ena...
HighCVSS 7.5
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gene6 g6 ftp server | = 2.0 | No fix listed |
References
- A040301-1 vendor-advisory
- 2537 vdb-entry
- bpftp-obtain-credentials(6330) vdb-entry