Lucene search

MitreCVE-2002-1544

HistoryMar 31, 2003 - 5:00 a.m.

CVE-2002-1544

2003-03-3105:00:00

mitre

web.nvd.nist.gov

security

vulnerability

cooolsoft personal ftp server

directory traversal

remote attack

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

7.3

Confidence

Low

EPSS

0.033

Percentile

91.3%

JSON

Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via … (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.

Affected configurations

Nvd

Node

cooolsoftpersonal_ftp_serverMatch2.24

VendorProductVersionCPE
cooolsoftpersonal_ftp_server2.24cpe:2.3:a:cooolsoft:personal_ftp_server:2.24:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cooolsoft	personal_ftp_server	2.24	cpe:2.3:a:cooolsoft:personal_ftp_server:2.24:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-10/0142.html

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

7.3

Confidence

Low

EPSS

0.033

Percentile

91.3%

JSON

Related for CVE-2002-1544