CVE-2003-0392 — MEDIUM (6.4)

Vulnerability Description

Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument (e.g. E:).

CVSS Score

6.4

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:P

Confidentiality

NONE

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
St	Ftp Service	3.0

References

http://marc.info/?l=bugtraq&m=105372353017778&w=2
http://marc.info/?l=bugtraq&m=105372353017778&w=2

FAQ

What is CVE-2003-0392?

CVE-2003-0392 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Directory traversal vulnerability in ST FTP Service 3.0 allows remote attackers to list arbitrary directories via a CD command with a DoS drive letter argument (e.g. E:).

How severe is CVE-2003-0392?

CVE-2003-0392 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-0392?

Check the references section above for vendor advisories and patch information. Affected products include: St Ftp Service.