Vulnerabilities > CVE-2004-2309 - Remote Information Disclosure vulnerability in Crob FTP Server 3.5.1

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
crob
exploit available
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.

Vulnerable Configurations

Part Description Count
Application
Crob
1

Exploit-Db

descriptionCrob FTP Server 3.5.1 Remote Information Disclosure Vulnerability. CVE-2004-2309. Remote exploit for windows platform
idEDB-ID:23632
last seen2016-02-02
modified2004-02-02
published2004-02-02
reporterZero X
sourcehttps://www.exploit-db.com/download/23632/
titleCrob FTP Server 3.5.1 - Remote Information Disclosure Vulnerability

References