high7.5
CVE-2001-1386
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".ln…
Impact
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Texasimperialsoftware | Wftpd | Version 3.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/194442
- http://www.securityfocus.com/bid/2957
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
- http://www.securityfocus.com/archive/1/194442
- http://www.securityfocus.com/bid/2957
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6760