CVE-2003-1380

2007-10-1910:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.1%

JSON

Directory traversal vulnerability in BisonFTP Server 4 release 2 allows remote attackers to (1) list directories above the root via an ‘ls @…/’ command, or (2) list files above the root via a “mget @…/FILE” command.

References

www.securityfocus.com/archive/1/312032

www.securityfocus.com/bid/6873

exchange.xforce.ibmcloud.com/vulnerabilities/11347