CVE-2001-1109 Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
HighCVSS 7.5
EPSS 8.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| khamil landross and zack jones eftp | = 2.0.7.337 | No fix listed |
References
- www.eftp.org url-repurposed
- 20010912 EFTP Version 2.0.7.337 vulnerabilities mailing-list vendor-advisory
- 3331 vdb-entry vendor-advisory
- 3333 exploit vdb-entry vendor-advisory
- eftp-list-directory-traversal(7113) vdb-entry
- eftp-quote-reveal-information(7114) vdb-entry