VulnerabilityModified
CVE-2004-2769
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
MEDIUM 4.0EPSS 1.50%
Does this matter?
Lower severity and a low EPSS score (1.50%). Track it; it rarely justifies an emergency change on its own.
Description
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.50% probability · 73th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- cerberusftp/ftp server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/40370Vendor Advisory
- http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644Vendor Advisory
- http://www.cerberusftp.com/releasenotes.html
- http://www.securityfocus.com/bid/41285
- http://secunia.com/advisories/40370Vendor Advisory
- http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644Vendor Advisory
- http://www.cerberusftp.com/releasenotes.html
- http://www.securityfocus.com/bid/41285
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.