CVE-2001-1109
EFTP 2.0.7.337 - Authenticated Directory Traversal via LIST QUOTE SIZE and QUOTE MDTM Commands
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-1109. PoCs published by byterage.
AI-analyzed exploit summary This Perl script exploits an information leakage vulnerability in certain FTP servers by using the SIZE or MDTM commands with wildcards to map directory structures outside the FTP root. It brute-forces filenames and paths to disclose unpublished filesystem information.
Description
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
Exploits (1)
This Perl script exploits an information leakage vulnerability in certain FTP servers by using the SIZE or MDTM commands with wildcards to map directory structures outside the FTP root. It brute-forces filenames and paths to disclose unpublished filesystem information.