Unscored severity · published Dec 23, 2002
CVE-2002-1345
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Ncftp · Ncftp Software
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.1.0; +4 more · source: NVD
OP
Openbsd · Openbsd
3.0 · source: NVD
SO
Solaris · Sun
2.6; 7.0 · source: NVD
SU
Sunos · Sun
5.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1345
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html
marc.info
http://marc.info/?l=bugtraq&m=103962838628940&w=2
www.iss.net
http://www.iss.net/security_center/static/10821.php
Patch
http://www.kb.cert.org/vuls/id/210409
www.securityfocus.com
http://www.securityfocus.com/bid/6360
More from Ncftp
–
CVE-2004-1948
NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information…