CVE-2004-2769

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/40370Vendor Advisory
http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644Vendor Advisory
http://www.cerberusftp.com/releasenotes.html
http://www.securityfocus.com/bid/41285
http://secunia.com/advisories/40370Vendor Advisory
http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644Vendor Advisory
http://www.cerberusftp.com/releasenotes.html
http://www.securityfocus.com/bid/41285

Timeline

Published: Jul 2, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-27717.5The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary CVE-2004-27769.8go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarch CVE-2004-277710.0GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administr CVE-2004-27787.1Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or CVE-2004-27797.5id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggeri