| Vulnerability Name: | CVE-2002-1345 (CCN-10821) | ||||||||
| Assigned: | 2002-12-10 | ||||||||
| Published: | 2002-12-10 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | File Manipulation | ||||||||
| References: | Source: CCN Type: SGI Security Advisory 20021205-01-A Directory Traversal Vulnerability in FTP Client Source: SGI Type: UNKNOWN 20021205-01-A Source: CCN Type: VulnWatch Mailing List, Tue Dec 10 2002 - 18:22:40 CST Directory Traversal Vulnerabilities in FTP Clients Source: VULNWATCH Type: UNKNOWN 20021210 Directory Traversal Vulnerabilities in FTP Clients Source: MITRE Type: CNA CVE-2002-1345 Source: BUGTRAQ Type: UNKNOWN 20021211 Directory Traversal Vulnerabilities in FTP Clients Source: XF Type: UNKNOWN ftp-client-filename-traversal(10821) Source: CCN Type: US-CERT VU#210409 Multiple FTP clients contain directory traversal vulnerabilities Source: CERT-VN Type: Patch, Third Party Advisory, US Government Resource VU#210409 Source: CCN Type: OSVDB ID: 16574 NcFTP Server Response Traversal Arbitrary File Write Source: CCN Type: OSVDB ID: 45352 FireFTP Extension for Mozilla Firefox Multiple FTP Server Command Traversal Arbitrary Client File Access Source: CCN Type: OSVDB ID: 45630 Core FTP Client Directory Download Traversal Arbitrary File Write Source: CCN Type: OSVDB ID: 45659 CuteFTP Crafted Filename Traversal Sequence Arbitrary File Download Source: CCN Type: OSVDB ID: 46044 ALFTP FTP Client Crafted Filename Traversal Sequence Arbitrary File Download Source: CCN Type: OSVDB ID: 46180 Glub Tech Secure FTP Crafted Filename Traversal Sequence Arbitrary File Download Source: CCN Type: OSVDB ID: 46537 WISE-FTP Client LIST Command Handling Traversal Arbitrary File Write Source: CCN Type: OSVDB ID: 46538 Classic FTP Client LIST Command Handling Traversal Arbitrary File Write Source: CCN Type: OSVDB ID: 46572 AceFTP Client LIST Command Traversal Arbitrary File Overwrite Source: CCN Type: OSVDB ID: 8944 Multiple Unix FTP Clients Double Dot Traversal Arbitrary File Access Source: BID Type: UNKNOWN 6360 Source: CCN Type: BID-6360 Multiple Vendor FTP Client Side File Overwriting Vulnerability Source: XF Type: UNKNOWN ftp-client-filename-traversal(10821) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||