CVE-2004-2309 Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.
LowCVSS 2.1
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crob ftp server | = 3.5.1 | No fix listed |
References
- 10778 exploit third-party-advisory vendor-advisory
- 20040201 Vulnerabilities in Crob FTP Server V3.5.1 mailing-list
- 9546 exploit vdb-entry
- 1008908 exploit vdb-entry
- crob-dir-directory-traversal(15028) vdb-entry