CVE-2001-0931 Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cooolsoft powerftp | = 2.03 | No fix listed |
References
- 20011128 PowerFTP-server-Bugs&Exploits-Remotes mailing-list
- 3593 vdb-entry vendor-advisory
- powerftp-dot-directory-traversal(7615) vdb-entry