Lucene search
MitreCVE-2004-2487HistoryOct 25, 2005 - 4:00 a.m.
CVE-2004-2487
2005-10-2504:00:00
mitre
web.nvd.nist.gov
18
cve-2004-2487
nexgen ftp server
vulnerability
directory traversal
authenticated users
remote
ftp server
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.009
Percentile
82.5%
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) “…”, (2) ".." (backslash dot dot), or (3) “/…/” sequences in (a) RETR (get), (b) NLST (ls), © LIST (ls), (d) RNFR, or (e) RNTO FTP commands.
Affected configurations
Node
nexgennexgen_ftp_serverMatch1.0
ORnexgennexgen_ftp_serverMatch2.0
ORnexgennexgen_ftp_serverMatch2.1
ORnexgennexgen_ftp_serverMatch2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nexgen | nexgen_ftp_server | 1.0 | cpe:2.3:a:nexgen:nexgen_ftp_server:1.0:*:*:*:*:*:*:* |
| nexgen | nexgen_ftp_server | 2.0 | cpe:2.3:a:nexgen:nexgen_ftp_server:2.0:*:*:*:*:*:*:* |
| nexgen | nexgen_ftp_server | 2.1 | cpe:2.3:a:nexgen:nexgen_ftp_server:2.1:*:*:*:*:*:*:* |
| nexgen | nexgen_ftp_server | 2.2 | cpe:2.3:a:nexgen:nexgen_ftp_server:2.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-2487
2005-10-25 04:00:00
exploitdb
exploitdb
NexGen FTP Server 1.0/2.x - Directory Traversal
2004-03-24 00:00:00
nvd
nvd
CVE-2004-2487
2004-12-31 05:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.009
Percentile
82.5%
Related for CVE-2004-2487