Vulnerability Details CVE-2000-0640
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.045
EPSS Ranking 88.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html
- http://www.osvdb.org/573
- http://www.securityfocus.com/bid/1452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4922
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html
- http://www.osvdb.org/573
- http://www.securityfocus.com/bid/1452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4922
Products affected by CVE-2000-0640
-
cpe:2.3:a:steve_poulsen:guildftpd:0.9.7