high7.5Public exploit code
CVE-2001-0263
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gene6 BPFTP Server 2.0 - File Existence Disclosure2001-04-03 · remote · windows · Verified
Impact
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gene6 | G6 Ftp Server | Version 2.0 |
References
- NVD record
- CVE.org record
- http://www.atstake.com/research/advisories/2001/a040301-1.txt
- http://www.securityfocus.com/bid/2537
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6330
- http://www.atstake.com/research/advisories/2001/a040301-1.txt
- http://www.securityfocus.com/bid/2537
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6330