First published: Wed Jun 21 2000(Updated: )
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape Professional Services Ftpserver | =1.3.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0577 is classified as a high severity vulnerability due to the risk of unauthorized file access.
To fix CVE-2000-0577, it is recommended to upgrade the Netscape Professional Services FTP Server to a more secure version.
CVE-2000-0577 can be exploited via a directory traversal attack that allows remote attackers to read arbitrary files.
CVE-2000-0577 specifically affects the Netscape Professional Services FTP Server version 1.3.6 regardless of the operating system.
CVE-2000-0577 affects the Netscape Professional Services FTP Server version 1.3.6.