CVE-2001-0491

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-04925.0Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing CVE-2001-04935.0Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.CVE-2001-04947.5Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long CVE-2001-04955.0Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attackCVE-2001-04964.6kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privilegCVE-2001-04977.8dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key CVE-2001-04985.0Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service vCVE-2001-049910.0Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges viCVE-2001-050010.0Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackeCVE-2001-05014.6Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manneCVE-2001-05024.6Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principalCVE-2001-05035.0Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to
CVE-2001-0491: Medium severity, CVSS 5.0 | Vulnix