CVE-2001-0698: Medium severity Netwin SurgeFTP vulnerability
Published Sep 20, 2001
·Updated
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.
Affected Software
2 affected components
Netwin SurgeFTP=1.0b
Netwin SurgeFTP=2.0a
Remediation
Patch Available
Patch Available
Event History
Sep 20, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0698?
CVE-2001-0698 is considered a high severity vulnerability due to its potential for remote file listing.
2
How do I fix CVE-2001-0698?
To mitigate CVE-2001-0698, upgrade to a version of NetWin SurgeFTP that is not affected, such as 2.0b or later.
3
What versions of SurgeFTP are affected by CVE-2001-0698?
CVE-2001-0698 affects NetWin SurgeFTP versions 1.0b and 2.0a.
4
Can CVE-2001-0698 be exploited remotely?
Yes, CVE-2001-0698 can be exploited by a remote attacker to enumerate files and directories.
5
What type of vulnerability is CVE-2001-0698?
CVE-2001-0698 is a directory traversal vulnerability.