CVE-2004-2769: Medium severity Cerberusftp Ftp Server vulnerability
Published Jul 2, 2010
·Updated
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
Affected Software
79 affected components
Cerberusftp Ftp Server=1.6-beta
Cerberusftp Ftp Server=2.1
Cerberusftp Ftp Server=3.0.6
Cerberusftp Ftp Server=1.71
Cerberusftp Ftp Server=3.1.0.3
Cerberusftp Ftp Server=4.0.0.9
Cerberusftp Ftp Server=2.02-beta
Cerberusftp Ftp Server=2.49
Cerberusftp Ftp Server=2.22
Cerberusftp Ftp Server=2.4-beta1
Cerberusftp Ftp Server=3.0.1
Cerberusftp Ftp Server=2.0-beta1
Cerberusftp Ftp Server=2.0-beta4
Cerberusftp Ftp Server=1.03
Cerberusftp Ftp Server=2.4
Cerberusftp Ftp Server=2.41
Cerberusftp Ftp Server=4.0.0.6
Cerberusftp Ftp Server=3.1.0.5
Cerberusftp Ftp Server=1.0
Cerberusftp Ftp Server=2.32
Cerberusftp Ftp Server=4.0.0
Cerberusftp Ftp Server=2.43
Cerberusftp Ftp Server=2.2-beta1
Cerberusftp Ftp Server=2.50
Cerberusftp Ftp Server=2.0-beta2
Cerberusftp Ftp Server=2.44
Cerberusftp Ftp Server=3.1.3.1
Cerberusftp Ftp Server=2.2-beta2
Cerberusftp Ftp Server=2.2-beta3
Cerberusftp Ftp Server=2.16
Cerberusftp Ftp Server=4.0.2
Cerberusftp Ftp Server=2.42
Cerberusftp Ftp Server=1.2
Cerberusftp Ftp Server=2.01
Cerberusftp Ftp Server<=4.0.2.2
Cerberusftp Ftp Server=4.0.0.11
Cerberusftp Ftp Server=3.0.7
Cerberusftp Ftp Server=3.0.5
Cerberusftp Ftp Server=2.47
Cerberusftp Ftp Server=1.01
Cerberusftp Ftp Server=3.0
Cerberusftp Ftp Server=3.0.4
Cerberusftp Ftp Server=2.46
Cerberusftp Ftp Server=2.02
Cerberusftp Ftp Server=2.0-beta3
Cerberusftp Ftp Server=2.0
Cerberusftp Ftp Server=3.1.3
Cerberusftp Ftp Server=3.1.4
Cerberusftp Ftp Server=2.11-beta2
Cerberusftp Ftp Server=2.4-beta2
Cerberusftp Ftp Server=3.0.2
Cerberusftp Ftp Server=2.2
Cerberusftp Ftp Server=2.11-beta
Cerberusftp Ftp Server=3.1.0.4
Cerberusftp Ftp Server=2.4-beta3
Cerberusftp Ftp Server=3.1
Cerberusftp Ftp Server=3.1.2
Cerberusftp Ftp Server=2.11
Cerberusftp Ftp Server=1.7
Cerberusftp Ftp Server=1.1
Cerberusftp Ftp Server=4.0.1.1
Cerberusftp Ftp Server=2.15-beta
Cerberusftp Ftp Server=3.0.7.1
Cerberusftp Ftp Server=2.3
Cerberusftp Ftp Server=2.21
Cerberusftp Ftp Server=1.5
Cerberusftp Ftp Server=1.05
Cerberusftp Ftp Server=2.45
Cerberusftp Ftp Server=2.48
Cerberusftp Ftp Server=2.31
Cerberusftp Ftp Server=4.0.1
Cerberusftp Ftp Server=1.02
Cerberusftp Ftp Server=3.1.1
Cerberusftp Ftp Server=2.23-beta
Cerberusftp Ftp Server=2.15
Cerberusftp Ftp Server=3.0.3
Cerberusftp Ftp Server=1.22
Cerberusftp Ftp Server=4.0.0.8
Cerberusftp Ftp Server=3.0.8
Event History
Jul 2, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2769?
CVE-2004-2769 is considered to have a moderate severity level due to the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2004-2769?
To fix CVE-2004-2769, update Cerberus FTP Server to version 4.0.3.0 or later.
3
Who is affected by CVE-2004-2769?
CVE-2004-2769 affects users of Cerberus FTP Server versions prior to 4.0.3.0.
4
What is the impact of CVE-2004-2769?
The impact of CVE-2004-2769 allows remote authenticated users to list hidden files, potentially exposing confidential data.
5
What commands are exploited in CVE-2004-2769?
CVE-2004-2769 involves exploitation through the MLSD and MLST commands.