Vulnerability in Ncftp Software
CVE-2002-1345
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
EPSS: 0.028 (84.9th percentile) — read the EPSS interpretation.
Affected products
- Ncftp_software Ncftp — versions 3.0.0, 3.0.1, 3.0.2
- Openbsd — versions 3.0
- Sun Solaris — versions 2.6, 7.0
- Sun Sunos — versions 5.7
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, x_refsource_XF)