CVE-2001-0765 BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.
MediumCVSS 4.6
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bisonware bison ftp server | = v4r1 | No fix listed |
References
- 20010702 BisonFTP Server V4R1 *.bdl upload Directory Traversal mailing-list vendor-advisory
- www.bisonftp.com vendor-advisory
- 1888 vdb-entry
- 2963 exploit patch vdb-entry vendor-advisory
- bisonftp-bdl-directory-traversal(6782) vdb-entry