PT-2000-1511 · Netscape · Netscape Professional Services Ftp Server
CVE-2000-0577
·
Published
2000-06-21
·
Updated
2008-09-10
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Netscape Professional Services FTP Server version 1.3.6
Description
The issue allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Recommendations
For Netscape Professional Services FTP Server version 1.3.6, consider restricting access to sensitive files and directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Netscape Professional Services Ftp Server