Vulnerability Details CVE-2004-2309
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.7%
CVSS Severity
CVSS v2 Score 2.1
References
- http://secunia.com/advisories/10778/
- http://www.securityfocus.com/archive/1/352329
- http://www.securityfocus.com/bid/9546
- http://www.securitytracker.com/alerts/2004/Feb/1008908.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15028
- http://secunia.com/advisories/10778/
- http://www.securityfocus.com/archive/1/352329
- http://www.securityfocus.com/bid/9546
- http://www.securitytracker.com/alerts/2004/Feb/1008908.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15028
Products affected by CVE-2004-2309
-
cpe:2.3:a:crob:crob_ftp_server:3.5.1