NetSight
IP …
medium5.0Public exploit code

CVE-2001-0255

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g. C:) in the requested pathname.

Affected products

VendorProductAffected versions
FastreamFastream Ftp\+\+ Server
Version 2.0
FastreamFastream Ftp Server
Version 2.0beta_11

References