CVE-2002-1054

Published: Oct 4, 2002Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.

Affected (1)

Products: Pablo Software Solutions: Pablo Ftp Server

Pablo Software Solutions

1 product

Pablo Ftp Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pablo Software Solutions Pablo Ftp Server	Version 1.0_build_9

References (12)

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/283665

Source: cve@mitre.org

http://www.iss.net/security_center/static/9647.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/4995

Source: cve@mitre.org

http://www.pablovandermeer.nl/ftpserversrc.zip

Source: cve@mitre.org

http://www.securityfocus.com/bid/5283

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html