medium4.0
CVE-2004-2769
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) …
Impact
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerberusftp | Ftp Server | through 4.0.2.2 Versions 1.0, 1.01, 1.1, 1.2, 1.02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/40370
- http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644
- http://www.cerberusftp.com/releasenotes.html
- http://www.securityfocus.com/bid/41285
- http://secunia.com/advisories/40370
- http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644
- http://www.cerberusftp.com/releasenotes.html
- http://www.securityfocus.com/bid/41285