CVE-2001-1335 Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified...
MediumCVSS 5.0
EPSS 8.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aclogic cesarftp | = 0.98b | No fix listed |
References
- 20010527 CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption mailing-list
- cesarftp-directory-traversal(6606) exploit vdb-entry vendor-advisory
- 2786 vdb-entry