CVE

CVE-2001-0680

Date: (C)2001-09-20   (M)2023-12-22

Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

OSVDB-1794

http://www.securityfocus.com/archive/1/176712

http://online.securityfocus.com/archive/1/216555

BID-2618

OSVDB-4050

qpc-ftpd-directory-traversal(6375)