CVEvulnerability
CVE-2006-5981
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands.
Affected configurations
• biba software seleniumserver ftp server 1.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/22928 Vendor Advisory
- http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html whitestar.linuxbox.org
- http://www.osvdb.org/30448 www.osvdb.org
- http://www.vupen.com/english/advisories/2006/4540 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30332 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/22928 Vendor Advisory
- http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html whitestar.linuxbox.org
- http://www.osvdb.org/30448 www.osvdb.org
- http://www.vupen.com/english/advisories/2006/4540 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30332 exchange.xforce.ibmcloud.com