CVE-2002-1544 Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (...
MediumCVSS 6.4
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cooolsoft personal ftp server | = 2.24 | No fix listed |
References
- 20021010 more silly bugs in cooolsoft 'personal ftp server' mailing-list vendor-advisory