CVE

Id
3913  
CVE No.
CVE-2001-1109  
Status
Candidate  
Description
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.  
Phase
Proposed (20020315)  
Votes
ACCEPT(3) Baker, Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese  
Comments
Baker> Apparently vendor acknowledgement of the directory problems in the | release history, located at: | http://www.eftp.org/releasehistory.html | 2.0.8.345 2001.12.04 | Fixed a problem where the server would give a GPF whn disconnecting a single user | Added Ratios Feature | Added Statistics Feature | Modified User/Group Administration - now much more stable | Modified Startup Logo | Modifed all data files to .ini files for easy editing and to save space | Added Feature to save/load queues | Added auto reconnect feature on timeout | Fully Implemented RSA Control Port encryption, so now even commands like USER, PASS, GET, REST etc are encrypted. Total security on both data and commands. | Added Idle Timout for the Server component | Fixed some security flaws with directory listings  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
17971 3913 CVE-2001-1109 BUGTRAQ:20010912 EFTP Version 2.0.7.337 vulnerabilities  View
17972 3913 CVE-2001-1109 URL:http://www.securityfocus.com/archive/1/213647  View
17973 3913 CVE-2001-1109 MISC:http://www.eftp.org/releasehistory.html  View
17974 3913 CVE-2001-1109 XF:eftp-list-directory-traversal(7113)  View
17975 3913 CVE-2001-1109 URL:http://xforce.iss.net/static/7113.php  View
17976 3913 CVE-2001-1109 XF:eftp-quote-reveal-information(7114)  View
17977 3913 CVE-2001-1109 URL:http://xforce.iss.net/static/7114.php  View
17978 3913 CVE-2001-1109 BID:3331  View
17979 3913 CVE-2001-1109 URL:http://www.securityfocus.com/bid/3331  View
17980 3913 CVE-2001-1109 BID:3333  View

Related JVN