Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2005-0372

Published: 02/05/2005 Updated: 03/08/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Gtk

Vulnerability Summary

Directory traversal vulnerability in gftp prior to 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Vulnerable Product Search on Vulmon Subscribe to Product

gnome gtk

Vendor Advisories

Red Hat: gftp security update
Synopsis gftp security update Type/Severity Security Advisory: Moderate Topic An updated gFTP package that fixes a directory traversal issue is nowavailableThis update has been rated as having moderate security impact by the RedHat Security Response Team Description gFTP is a multi-thread ...
Debian Security Advisories: DSA-686-1 gftp -- missing input sanitising
Albert Puigsech Galicia discovered a directory traversal vulnerability in a proprietary FTP client (CAN-2004-1376) which is also present in gftp, a GTK+ FTP client A malicious server could provide a specially crafted filename that could cause arbitrary files to be overwritten or created by the client For the stable distribution (woody) this probl ...

References

CWE-22http://www.debian.org/security/2005/dsa-686http://www.gentoo.org/security/en/glsa/glsa-200502-27.xmlhttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000957http://www.securityfocus.com/advisories/8379http://www.securityfocus.com/advisories/8380http://www.securityfocus.com/bid/12539http://www.redhat.com/support/errata/RHSA-2005-410.htmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:050https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9923https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A717https://access.redhat.com/errata/RHSA-2005:410https://nvd.nist.govhttps://www.debian.org/security/./dsa-686
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook