Vulnerability in N/a
CVE-2001-0680
Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command.
EPSS: 0.832 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 20010413 QPC FTPd Directory Traversal and BoF Vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
- 2618 (vdb-entry, x_refsource_BID)
- qpc-ftpd-directory-traversal(6375) (vdb-entry, x_refsource_XF)
- 20010925 Vulnerabilities in QVT/Term (mailing-list, x_refsource_BUGTRAQ)
- 1794 (x_refsource_OSVDB, vdb-entry)
- 4050 (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2001-0680?
- CVE-2001-0680 is a vulnerability in N/a. Published 2002-03-09.
- Is CVE-2001-0680 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.