Vulnerability in Cooolsoft Personal Ftp Server
CVE-2002-1544
Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
EPSS: 0.016 (73.0th percentile) — read the EPSS interpretation.
Affected products
- Cooolsoft Personal_ftp_server — versions 2.24
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)