CVE-2003-1299

Published: Dec 31, 2003Modified: Apr 16, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." (triple dot) manipulations to the CWD command.

Affected (1)

Products: Pablo Software Solutions: Baby Ftp Server

Pablo Software Solutions

1 product

Baby Ftp Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pablo Software Solutions Baby Ftp Server	Version 1.2

References (8)

http://packetstormsecurity.org/0305-exploits/baby.txt

Source: cve@mitre.org

Exploit

http://www.osvdb.org/24538

Source: cve@mitre.org

http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/7749

Source: cve@mitre.org

http://packetstormsecurity.org/0305-exploits/baby.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/24538

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/7749

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.