Unscored CVE-2001-0582 EUVD-2001-0574GHSA-9mr6-qr78-8xhw

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variation…

Published Jul 27, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.

References

crushftp-directory-traversal(6495) vdb-entry
20010503 Vulnerabilities in CrushFTP Server mailing-list
VU#110803 third-party-advisory