Vulnerability Details CVE-2006-1383
Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.6%
CVSS Severity
CVSS v2 Score 4.0
References
- http://secunia.com/advisories/19338
- http://www.osvdb.org/24057
- http://www.securityfocus.com/bid/17205
- http://www.vupen.com/english/advisories/2006/1069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25413
- http://secunia.com/advisories/19338
- http://www.osvdb.org/24057
- http://www.securityfocus.com/bid/17205
- http://www.vupen.com/english/advisories/2006/1069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25413
Products affected by CVE-2006-1383
-
cpe:2.3:a:pablo_software_solutions:baby_ftp_server:1.24