CVE-2004-1643: Undefined Security Weakness

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2005-0278: Undefined Security Weakness

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

Ipswitch WS_FTP Server 5.0.x - CD Command Malformed File Path Remote Denial of Service

source: https://www.securityfocus.com/bid/11065/info WSFTP Server is reported prone to a remote denial of service vulnerability. This issue presents itself when the application processes a malformed file path through the 'cd' command. WSFTP Server version 5.0.2 is reported prone to this issue,...

CVE-2004-0677

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

CVE-2004-0677: Undefined Security Weakness

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

CVE-2003-0392

The CVE-2003-0392 entry concerns ST FTP Service 3.0, where a vulnerability in the CD command handling enables directory traversal. An attacker can cause the server to list arbitrary directories by supplying a drive-letter argument (for example, CD E:), potentially exposing files outside the FTP j...

CVE-2003-0392: Undefined Security Weakness

Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument e.g. E:...

ST FTP directory traversal

It's possible to perform cd to any disk...

CVE-2001-1295: Undefined Security Weakness

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the CD command...

CVE-2001-1300: Undefined Security Weakness

Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD CWD command...

CVE-2001-1131: Undefined Security Weakness

Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... modified dot dot in the CD command...

CVE-2001-0963

SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...

CVE-2001-0963: Undefined Security Weakness

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... modified dot dot in the CD CWD command...

CVE-2001-0696: Undefined Security Weakness

NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service crash via a CD command to a directory with an MS-DOS device name such as con...

CVE-2001-0694: Undefined Security Weakness

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0688: Undefined Security Weakness

Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD "CD . ." command...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0480

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...

CVE-2001-0452

BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD " command followed by an ls command...

CVE-2001-0480: Undefined Security Weakness

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... modified dot dot in the 1 GET or 2 CD commands...