CVE-2002-1345 Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path o...
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncftp software ncftp | = 3.0.0 | No fix listed |
| ncftp software ncftp | = 3.0.1 | No fix listed |
| ncftp software ncftp | = 3.0.2 | No fix listed |
| ncftp software ncftp | = 3.0.3 | No fix listed |
| ncftp software ncftp | = 3.0.4 | No fix listed |
| ncftp software ncftp | = 3.1.0 | No fix listed |
| ncftp software ncftp | = 3.1.1 | No fix listed |
| ncftp software ncftp | = 3.1.2 | No fix listed |
| ncftp software ncftp | = 3.1.3 | No fix listed |
| ncftp software ncftp | = 3.1.4 | No fix listed |
| OpenBSD | = 3.0 | No fix listed |
| sun solaris | = 2.6 | No fix listed |
| sun solaris | = 7.0 | No fix listed |
| sunos | All versions | No fix listed |
| sunos | = 5.7 | No fix listed |
References
- 20021210 Directory Traversal Vulnerabilities in FTP Clients mailing-list
- 20021211 Directory Traversal Vulnerabilities in FTP Clients mailing-list
- ftp-client-filename-traversal(10821) vdb-entry
- VU#210409 patch third-party-advisory us-government-resource
- 6360 vdb-entry