CVE-2004-2487

CVE-2004-2487 concerns Nexgen FTP Server before 2.2.3.23, where authenticated remote users can read or list arbitrary files via directory traversal sequences in FTP commands (RETR, NLST, LIST, RNFR, RNTO). Affected component is the FTP command handling in Nexgen server; root cause: traversal sequ...

CVE-2004-2487

Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via 1 "..", 2 ".." backslash dot dot, or 3 "/../" sequences in a RETR get, b NLST ls, c LIST ls, d RNFR, or e RNTO FTP commands...