CVE

CVE-2001-0765

Date: (C)2001-10-18   (M)2023-12-22

BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

OSVDB-1888

http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html

BID-2963

bisonftp-bdl-directory-traversal(6782)

http://www.bisonftp.com/ServRev.htm