high7.5Public exploit code
CVE-2000-0640
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DrPhibez and Nitro187 Guild FTPD 0.9.7 - File Existence Disclosure2000-07-08 · remote · windows · Verified
Impact
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steve Poulsen | Guildftpd | Version 0.9.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html
- http://www.osvdb.org/573
- http://www.securityfocus.com/bid/1452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4922
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html
- http://www.osvdb.org/573
- http://www.securityfocus.com/bid/1452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4922