critical10.0Public exploit code
CVE-2000-0577
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 - FTP Server2000-06-21 · remote · unix · Verified
Impact
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netscape | Professional Services Ftpserver | Version 1.3.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0345.html
- http://www.securityfocus.com/bid/1411
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211351280.23780-100000%40nimue.tpi.pl
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0345.html
- http://www.securityfocus.com/bid/1411
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211351280.23780-100000%40nimue.tpi.pl