Test ID:	1.3.6.1.4.1.25623.1.0.11112
Category:	FTP
Title:	Generic FTP traversal
Summary:	NOSUMMARY
Description:	Description: The remote FTP server allows any anonymous user to browse the entire remote disk by issuing commands like : LIST ../../../../../ LIST ..\..\..\..\.. Solution : Contact your vendor for a patch Risk factor : High
Cross-Ref:	BugTraq ID: 2618 BugTraq ID: 2786 BugTraq ID: 5168 BugTraq ID: 11159 Common Vulnerability Exposure (CVE) ID: CVE-2001-0680 http://www.securityfocus.com/bid/2618 Bugtraq: 20010413 QPC FTPd Directory Traversal and BoF Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/176712 Bugtraq: 20010925 Vulnerabilities in QVT/Term (Google Search) http://online.securityfocus.com/archive/1/216555 http://www.osvdb.org/1794 http://www.osvdb.org/4050 XForce ISS Database: qpc-ftpd-directory-traversal(6375) https://exchange.xforce.ibmcloud.com/vulnerabilities/6375 Common Vulnerability Exposure (CVE) ID: CVE-2001-1335 http://www.securityfocus.com/bid/2786 Bugtraq: 20010527 CesarFTP v0.98b triple dot Directory Traversal / Weak password encryption (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html http://www.iss.net/security_center/static/6606.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0582 Bugtraq: 20010503 Vulnerabilities in CrushFTP Server (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html CERT/CC vulnerability note: VU#110803 http://www.kb.cert.org/vuls/id/110803 XForce ISS Database: crushftp-directory-traversal(6495) https://exchange.xforce.ibmcloud.com/vulnerabilities/6495
Copyright	This script is Copyright (C) 2002 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.