Directory Traversal Vulnerability in FTP Serv-U by Rhinosoft
CVE-2001-0054

Currently unrated

Key Information:

Vendor

Solarwinds

Vendor
CVE Published:
16 February 2001

What is CVE-2001-0054?

The affected version of FTP Serv-U is susceptible to a directory traversal vulnerability, allowing remote attackers to navigate outside the designated FTP root directory. By manipulating the CD command with specific input patterns such as '/..%20.', unauthorized users can gain access to arbitrary files on the server. This type of attack exploits the way the server processes directory commands, posing a serious risk of data exposure.

References

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.