Lucene search

K
cve[email protected]CVE-2006-1383
HistoryMar 24, 2006 - 11:02 a.m.

CVE-2006-1383

2006-03-2411:02:00
web.nvd.nist.gov
30
cve-2006-1383
directory traversal
baby ftp server
babyftp
remote authenticated users
document root
vulnerability
nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.6%

Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.

Affected configurations

NVD
Node
pablo_software_solutionsbaby_ftp_serverMatch1.24

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.6%

Related for CVE-2006-1383