CVE-2001-1295: Medium severity Grant Averett Cerberus FTP Server vulnerability
Published Aug 21, 2001
·Updated
Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.
Affected Software
1 affected component
Grant Averett Cerberus FTP Server<=1.5
Event History
Aug 21, 2001
CVE Published
04:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1295?
CVE-2001-1295 is considered to have a high severity due to its potential to allow unauthorized access to sensitive files.
2
How do I fix CVE-2001-1295?
To fix CVE-2001-1295, upgrade to a version of Cerberus FTP Server later than 1.5 that addresses this vulnerability.
3
Who is affected by CVE-2001-1295?
CVE-2001-1295 affects users of Cerberus FTP Server version 1.5 or earlier.
4
What kind of attack can exploit CVE-2001-1295?
Attackers can exploit CVE-2001-1295 using directory traversal techniques to read arbitrary files on the server.
5
Is CVE-2001-1295 still relevant today?
CVE-2001-1295 is considered outdated, but awareness is important for users of legacy versions of Cerberus FTP Server.