Unscored CVE-2000-1101 EUVD-2000-1086GHSA-c67w-7c4h-rcfv

Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local u…

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack.

References

wftpd-dir-traverse(5608) vdb-entry
2005 vdb-entry
20001127 Vulnerability in Winsock FTPD 2.41/3.00 (Pro) mailing-list