CVE-2001-0680

Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-09-20

Last modified

2024-08-08

Affected products

• Avt Term (Qpc Software)
• Qvt Net (Qpc Software)

References

• http://online.securityfocus.com/archive/1/216555
• http://www.osvdb.org/1794
• http://www.osvdb.org/4050
• http://www.securityfocus.com/archive/1/176712
• http://www.securityfocus.com/bid/2618
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6375