Unscored CVE-2002-1054 EUVD-2002-1043GHSA-9vrq-gfxr-fjfq

Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directori…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.

References

5283 vdb-entry
20020722 [VulnWatch] Pablo Sofware Solutions FTP server Directory Traversal Vulnerability mailing-list
4995 vdb-entry
http://www.pablovandermeer.nl/ftpserversrc.zip
pablo-ftp-directory-traversal(9647) vdb-entry
20020722 Pablo Sofware Solutions FTP server Directory Traversal Vulnerability mailing-list