Unscored CVE-2002-0877 EUVD-2002-0869GHSA-vq9f-9qrj-j94q

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in …

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

References

shambala-dotdot-directory-traversal(9224) vdb-entry
4896 vdb-entry
20020530 [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS mailing-list