CVE-2001-0687

Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by (1) issuing a CD command (CD C:) followed by the LS command, (2) specifying arbitrary paths in the UNC format (\\computername\sharename).

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-09-20

Last modified

2024-08-08

Affected products

• Broker Ftp Server (Transsoft)

References

• http://www.securityfocus.com/archive/1/190032
• http://www.securityfocus.com/bid/2853
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6674