Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2005-2142 | First vendor Publication | 2005-07-05 |
| Vendor | Cve | Last vendor Modification | 2008-09-05 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary directories via a "\.." (backslash dot dot) in an LS (LIST) command. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2142 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 17678 | Golden FTP Server Pro LS Command Traversal Information Disclosure Golden FTP Server Pro contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered due to an input validation error in the handling of the LS command. By changing directory to a share and then passing "\.." as an argument to the LS command, it will disclose the contents of the application directory (e.g. containing files with names of valid users) resulting in a loss of confidentiality. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2005-07-05 | Name : The remote FTP server is affected by information disclosure flaws. File : golden_ftp_server_ls_dir_traversal.nasl - Type : ACT_ATTACK |
Sources (Detail)
| Source | Url |
|---|---|
| SECUNIA | http://secunia.com/advisories/15840 |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:03:03 |
|
| 2021-04-22 01:03:19 |
|
| 2020-05-23 00:16:40 |
|
| 2016-04-26 13:38:34 |
|
| 2014-02-17 10:32:01 |
|
| 2013-05-11 11:28:24 |
|
