CVE-2001-0283

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-028410.0Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possiCVE-2001-028510.0Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a loCVE-2001-02865.0Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET rCVE-2001-02872.1VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstaCVE-2001-02887.5Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackeCVE-2001-02894.6Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain prCVE-2001-02904.6Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.CVE-2001-029110.0Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that containCVE-2001-02927.5PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling uCVE-2001-02935.0Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET cCVE-2001-02945.0Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GETCVE-2001-02955.0Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *
CVE-2001-0283: Medium severity, CVSS 6.4 | Vulnix