Vulnerability in Ben Spink Crushftp Ftp Server

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.

EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.

Affected products

Ben_spink Crushftp_ftp_server — versions 2.1.4
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)