CVE-2004-0676 Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences...
HighCVSS 10.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fastream netfile ftp web server | = 6.5.1.980 | No fix listed |
| fastream netfile ftp web server | = 6.5.1.981 | No fix listed |
| fastream netfile ftp web server | = 6.7.2.1085 | No fix listed |
References
- 20040704 Fastream NETFile FTP/Web Server Input validation Errors mailing-list
- www.haxorcitos.com url-repurposed
- 10658 exploit patch vdb-entry vendor-advisory
- fastream-mkdir-file-upload(16613) vdb-entry