critical10.0Public exploit code
CVE-2004-0676
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal2004-07-05 · webapps · cgi · Verified
Impact
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fastream | Netfile Ftp Web Server | Versions 6.5.1.980, 6.5.1.981, 6.7.2.1085 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108904874104880&w=2
- http://www.haxorcitos.com/Fastream_advisory.txt
- http://www.securityfocus.com/bid/10658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16613
- http://marc.info/?l=bugtraq&m=108904874104880&w=2
- http://www.haxorcitos.com/Fastream_advisory.txt
- http://www.securityfocus.com/bid/10658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16613