CVE-2001-0480

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jun 27, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04817.2Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.CVE-2001-04827.2Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or e CVE-2001-04837.5Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources whe CVE-2001-04846.4Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml,CVE-2001-04857.2Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitr CVE-2001-04865.0Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.CVE-2001-04875.0AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.CVE-2001-04882.1pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.CVE-2001-04897.5Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.CVE-2001-04907.5Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.CVE-2001-04915.0Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot do CVE-2001-04925.0Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing