medium5.0Public exploit code
CVE-2001-0264
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure2001-04-03 · remote · windows · Verified
Impact
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gene6 | G6 Ftp Server | Version 2.0 |