A vulnerability was found in BisonFTP Server 4 Release 2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component ls/mget Command Handler. The manipulation as part of .. leads to path traversal.
This vulnerability is known as CVE-2003-1380. The attack can be launched remotely. There is no exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2003-1380 | BisonFTP Server 4 Release 2 ls/mget Command .. path traversal (ID 27182 / XFDB-11347)
A vulnerability was found in BisonFTP Server 4 Release 2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.securityfocus.com
-
Web Referencewww.securityfocus.com
-
Web Referenceexchange.xforce.ibmcloud.com