CVE-2006-1383

Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2006-03-24

Last modified

2024-08-07

Affected products

• Baby Ftp Server (Pablo Software Solutions)

References

• http://secunia.com/advisories/19338
• http://www.osvdb.org/24057
• http://www.securityfocus.com/bid/17205
• http://www.vupen.com/english/advisories/2006/1069
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25413