CVE-2006-1383 - Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not

Published Mar 24, 2006

4.0

MEDIUM

CVSS 2.0

EPSS 1.31%

Description

Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/19338
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24057
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17205
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1069
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1387
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25413
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19338		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24057		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17205		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1069		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1387		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25413		vdb-entryx_refsource_XF