CVE-2002-1545 CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cooolsoft personal ftp server | = 2.24 | No fix listed |
References
- 20021010 more silly bugs in cooolsoft 'personal ftp server' mailing-list vendor-advisory