CVE-2001-1335

CVE-2001-1335 involves CesarFTP, affected in versions 0.98b and earlier. The issue is a directory traversal vulnerability that allows remote authenticated users (including anonymous) to read arbitrary files by sending a GET request whose filename contains a ...%5c (modified dot dot). The provided...

CVE-2001-1335

Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users such as anonymous to read arbitrary files via a GET with a filename that contains a ...%5c modified dot dot...