Lucene search

[email protected]CVE-2004-0676

HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0676

2004-08-0604:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0676

directory traversal

fastream netfile

ftp

web server

remote attackers

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

JSON

Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via … (dot dot) and // (double slash) sequences in the filename parameter.

Affected configurations

NVD

Node

fastreamnetfile_ftp_web_serverMatch6.5.1.980

fastreamnetfile_ftp_web_serverMatch6.5.1.981

fastreamnetfile_ftp_web_serverMatch6.7.2.1085

CPENameOperatorVersion
fastream:netfile_ftp_web_serverfastream netfile ftp web servereq6.5.1.980
fastream:netfile_ftp_web_serverfastream netfile ftp web servereq6.5.1.981
fastream:netfile_ftp_web_serverfastream netfile ftp web servereq6.7.2.1085

CPE	Name	Operator	Version
fastream:netfile_ftp_web_server	fastream netfile ftp web server	eq	6.5.1.980
fastream:netfile_ftp_web_server	fastream netfile ftp web server	eq	6.5.1.981
fastream:netfile_ftp_web_server	fastream netfile ftp web server	eq	6.7.2.1085

References

marc.info/?l=bugtraq&m=108904874104880&w=2

www.haxorcitos.com/Fastream_advisory.txt

www.securityfocus.com/bid/10658

exchange.xforce.ibmcloud.com/vulnerabilities/16613

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

JSON

Related for CVE-2004-0676

cvelist1 nvd1