CesarFTP目录遍历漏洞

漏洞信息详情

CesarFTP目录遍历漏洞

• CNNVD编号：CNNVD-200105-098
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2001-1335
  
• 漏洞类型：
  
  
  路径遍历
  
• 发布时间：
  
  2001-05-27
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  aclogic
• 漏洞来源：
  This vulnerability…

CesarFTP 0.98b及其之前版本存在目录遍历漏洞。远程认证用户借助带有包含…\\%5c（修改点 点）文件名的GET读取任意文件。

The vendor has been notified, but as of yet has not responded with news of any pending patches or fixes.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>

来源: XF
名称: cesarftp-directory-traversal(6606)
链接:http://www.iss.net/security_center/static/6606.php

来源: BUGTRAQ
名称: 20010527 CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption
链接:http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html

来源: BID
名称: 2786
链接:http://www.securityfocus.com/bid/2786