20010527 CesarFTP v0.98b triple dot Directory Traversal / Weak password encryptionmailing list
http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html CVE-2001-1335
ACLogic CesarFTP 0.98b - Directory Traversal
Record summary
CVE-2001-1335 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot).
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBACLogic CesarFTP 0.98b - Directory TraversalExploitDB exploitby byterageNot analyzed1 file
References
4cesarftp-directory-traversal(6606)vdb entry
http://www.iss.net/security_center/static/6606.php 2786vdb entry
http://www.securityfocus.com/bid/2786 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-1335