CVE-2002-0558

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard . characters.

Published: Jul 3, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0558
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
typsoft / typsoft_ftp_server	0.95	0.95.x
typsoft / typsoft_ftp_server	0.85	0.85.x
typsoft / typsoft_ftp_server	0.96	0.96.x
typsoft / typsoft_ftp_server	0.97	0.97.x
typsoft / typsoft_ftp_server	0.93	0.93.x

http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html
http://www.iss.net/security_center/static/6165.php
http://www.securityfocus.com/bid/2489

Vulnerability Database

CVE-2002-0558