A040301-1Vendor advisory
http://www.atstake.com/research/advisories/2001/a040301-1.txt CVE-2001-0263
Gene6 BPFTP Server 2.0 - File Existence Disclosure
Record summary
CVE-2001-0263 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGene6 BPFTP Server 2.0 - File Existence DisclosureExploitDB exploitby Rob BeckNot analyzed1 file
References
42537vdb entry
http://www.securityfocus.com/bid/2537 bpftp-obtain-credentials(6330)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6330 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0263