Vulnerability Details : CVE-2003-1299
Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "..." (triple dot) manipulations to the CWD command.
Vulnerability category: Directory traversal
Exploit prediction scoring system (EPSS) score for CVE-2003-1299
Probability of exploitation activity in the next 30 days: 0.18%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 54 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2003-1299
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
[email protected] |
References for CVE-2003-1299
Products affected by CVE-2003-1299
- cpe:2.3:a:pablo_software_solutions:baby_ftp_server:1.2:*:*:*:*:*:*:*