CVE-2004-2487 Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) "..", (2) ".." (backslash dot dot), or (3) "/../" seque...
MediumCVSS 4.0
EPSS 3.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) "..", (2) ".." (backslash dot dot), or (3) "/../" sequences in (a) RETR (get), (b) NLST (ls), (c) LIST (ls), (d) RNFR, or (e) RNTO FTP commands.
Affected products
No affected product data has been published yet.
References
- 11216 third-party-advisory vendor-advisory
- www.nexgenserver.com url-repurposed
- 4557 exploit vdb-entry
- 9970 patch vdb-entry
- 1009545 exploit vdb-entry
- nexgen-dotdot-directory-traversal(15594) vdb-entry