CVE-2006-5981
Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR…
Does this matter?
Lower severity and a low EPSS score (1.65%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 1.65% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- biba software/seleniumserver ftp server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22928Vendor Advisory
- http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html
- http://www.osvdb.org/30448
- http://www.vupen.com/english/advisories/2006/4540Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30332
- http://secunia.com/advisories/22928Vendor Advisory
- http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html
- http://www.osvdb.org/30448
- http://www.vupen.com/english/advisories/2006/4540Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30332
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.