Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-2487. PoCs published by Ziv Kamir.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Nexgen FTP server by using malformed commands to access sensitive files and directories. The PoC includes commands to list and retrieve files outside the intended directory structure.
Description
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) "..", (2) "\..\" (backslash dot dot), or (3) "/../" sequences in (a) RETR (get), (b) NLST (ls), (c) LIST (ls), (d) RNFR, or (e) RNTO FTP commands.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Nexgen FTP server by using malformed commands to access sensitive files and directories. The PoC includes commands to list and retrieve files outside the intended directory structure.