CVE-2001-0264

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.atstake.com/research/advisories/2001/a040301-1.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/2534Exploit, Patch, Vendor Advisory
http://www.atstake.com/research/advisories/2001/a040301-1.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/2534Exploit, Patch, Vendor Advisory

Timeline

Published: Jun 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-02652.1ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored fi CVE-2001-02667.2Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.CVE-2001-02677.2NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.CVE-2001-02687.2The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not va CVE-2001-026910.0pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.CVE-2001-02705.0Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malforme CVE-2001-027110.0mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.CVE-2001-02725.0Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via CVE-2001-02732.6pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privac CVE-2001-02747.5kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2001-02752.1Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP CVE-2001-02766.4ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly call