Lucene search

MitreCVE-2000-0565

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-0565

2001-01-2205:00:00

mitre

web.nvd.nist.gov

smartftp daemon

0.2 version

local user

unauthorized access

file security

cve-2000-0565

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a … (dot dot) attack.

Affected configurations

Nvd

Node

mindstormsmartftp_daemonMatch0.2

VendorProductVersionCPE
mindstormsmartftp_daemon0.2cpe:2.3:a:mindstorm:smartftp_daemon:0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mindstorm	smartftp_daemon	0.2	cpe:2.3:a:mindstorm:smartftp_daemon:0.2:::::::*

References

archives.neohapsis.com/archives/bugtraq/2000-06/0100.html

www.osvdb.org/1394

www.securityfocus.com/bid/1344

exchange.xforce.ibmcloud.com/vulnerabilities/4706

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2000-0565