Lucene search

K
cveMitreCVE-2005-0690
HistoryMar 08, 2005 - 5:00 a.m.

CVE-2005-0690

2005-03-0805:00:00
mitre
web.nvd.nist.gov
28
gene6 ftp server
local users
privileges
site command
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

5.1%

Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command.

Affected configurations

Nvd
Node
gene6g6_ftp_serverMatch2.0
OR
gene6g6_ftp_serverMatch3.0
OR
gene6g6_ftp_serverMatch3.0.1
OR
gene6g6_ftp_serverMatch3.0.2
OR
gene6g6_ftp_serverMatch3.1
OR
gene6g6_ftp_serverMatch3.2
OR
gene6g6_ftp_serverMatch3.3
OR
gene6g6_ftp_serverMatch3.3.1
OR
gene6g6_ftp_serverMatch3.4
VendorProductVersionCPE
gene6g6_ftp_server2.0cpe:2.3:a:gene6:g6_ftp_server:2.0:*:*:*:*:*:*:*
gene6g6_ftp_server3.0cpe:2.3:a:gene6:g6_ftp_server:3.0:*:*:*:*:*:*:*
gene6g6_ftp_server3.0.1cpe:2.3:a:gene6:g6_ftp_server:3.0.1:*:*:*:*:*:*:*
gene6g6_ftp_server3.0.2cpe:2.3:a:gene6:g6_ftp_server:3.0.2:*:*:*:*:*:*:*
gene6g6_ftp_server3.1cpe:2.3:a:gene6:g6_ftp_server:3.1:*:*:*:*:*:*:*
gene6g6_ftp_server3.2cpe:2.3:a:gene6:g6_ftp_server:3.2:*:*:*:*:*:*:*
gene6g6_ftp_server3.3cpe:2.3:a:gene6:g6_ftp_server:3.3:*:*:*:*:*:*:*
gene6g6_ftp_server3.3.1cpe:2.3:a:gene6:g6_ftp_server:3.3.1:*:*:*:*:*:*:*
gene6g6_ftp_server3.4cpe:2.3:a:gene6:g6_ftp_server:3.4:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2005-0690