CVE-2001-1109
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/09/2001
Last modified:
03/04/2025
Description
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.7.337:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.eftp.org/releasehistory.html
- http://www.securityfocus.com/archive/1/213647
- http://www.securityfocus.com/bid/3331
- http://www.securityfocus.com/bid/3333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7114
- http://www.eftp.org/releasehistory.html
- http://www.securityfocus.com/archive/1/213647
- http://www.securityfocus.com/bid/3331
- http://www.securityfocus.com/bid/3333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7114