Vulnerability in Microsoft Ie
CVE-2005-2126
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.
EPSS: 0.143 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions r2
- Microsoft Windows_xp
- N/a — versions n/a
References
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- secure@microsoft.com (x_refsource_CONFIRM)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (Patch, x_refsource_MISC)