| |
Vulnerability CVE-2002-1544
Published: 2003-03-31 Modified: 2012-02-12
| Description: |
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get. |
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.4/10 |
4.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
None |
References: |
http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
