CVE-2003-1299 | BDVDB-2026-15845 Detail

Description#

Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." (triple dot) manipulations to the CWD command.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html
http://www.securityfocus.com/bid/7749
http://www.osvdb.org/24538
http://packetstormsecurity.org/0305-exploits/baby.txt

Exploit#

No public exploit known

History#

Version 12006-03-24Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.