CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cooolsoft powerftp | = 2.03 | No fix listed |
References
- 20011128 PowerFTP-server-Bugs&Exploits-Remotes mailing-list