CVE-2000-0640 - Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .

Back Back to CVE browser

HIGH

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .

Published Oct 13, 2000

7.5

HIGH

CVSS 2.0

EPSS 7.20%

Description

Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html
mailing-listx_refsource_BUGTRAQExploitPatchVendor Advisory
http://www.osvdb.org/573
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/1452
vdb-entryx_refsource_BIDExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0636
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4922
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html		mailing-listx_refsource_BUGTRAQExploitPatchVendor Advisory
http://www.osvdb.org/573		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/1452		vdb-entryx_refsource_BIDExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0636		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4922		vdb-entryx_refsource_XF