Unscored CVE-2001-1386 EUVD-2001-1366GHSA-h92h-m4pr-cxfx

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTP…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.

References

ftp-lnk-directory-traversal(6760) vdb-entry
2957 vdb-entry
20010701 WFTPD v3.00 R5 Directory Traversal mailing-list