CVE-2005-0372: Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via

Unscored severity · published May 2, 2005

CVE-2005-0372

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via

–

CVSS

4.4%

EPSS

On KEV

Description

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Exploitation

Is it being used?

Exploit prediction (EPSS)4.4% · higher than 91% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Gtk · Gnome

before 2.0.18 · source: NVD

Affected product

Gtk

Gnome

All Gtk CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2005-0372

CVE.org

https://www.cve.org/CVERecord?id=CVE-2005-0372

Third Party Advisory

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000957

Patch

http://www.debian.org/security/2005/dsa-686

Patch

http://www.gentoo.org/security/en/glsa/glsa-200502-27.xml

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2005:050

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2005-410.html

Third Party Advisory

http://www.securityfocus.com/advisories/8379