Vulnerabilities > CVE-2001-0255 - Directory Traversal vulnerability in Fastream FTP++

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
fastream
exploit available

Summary

FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g. C:) in the requested pathname.

Vulnerable Configurations

Part Description Count
Application
Fastream
2

Exploit-Db

descriptionFastream FTP++ 2.0 Directory Traversal Vulnerability. CVE-2001-0255 . Remote exploit for windows platform
idEDB-ID:20584
last seen2016-02-02
modified2001-01-22
published2001-01-22
reporterSNS Research
sourcehttps://www.exploit-db.com/download/20584/
titlefastream ftp++ 2.0 - Directory Traversal Vulnerability