CVE-2000-0876

Published May 7, 2001 CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Description
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2000-0863 WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 5:37 AM
Reserved
Oct 18, 2000, 12:00 AM
Status
Modified
Published
Nov 14, 2000, 5:00 AM
Modified
Jun 16, 2026, 9:52 PM