CVE-2004-2488

2005-10-2504:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via “C:” sequences in the (1) RETR (get), (2) NLST (ls), (3) LIST (ls), (4) RNFR, or (5) RNTO FTP commands.

References

secunia.com/advisories/11216

www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html

www.osvdb.org/4557

www.securityfocus.com/bid/9970

www.securitytracker.com/alerts/2004/Mar/1009545.html

exchange.xforce.ibmcloud.com/vulnerabilities/15594