CVE-2001-1386

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Jul 1, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-13872.1iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptaCVE-2001-13885.0iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users tCVE-2001-13897.5Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of sCVE-2001-13906.2Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.CVE-2001-13915.5Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.CVE-2001-13922.1The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloadinCVE-2001-13932.1Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).CVE-2001-13942.1Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service.CVE-2001-13953.6Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.CVE-2001-13963.6Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.CVE-2001-13972.1The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory.CVE-2001-13987.5Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.