CNCVE编号:CNCVE-20010767 CVE编号:CAN-2001-0767 安全级别:中 漏洞中文描述: GuildFTPd 0.9.7 中的目录遍历漏洞允许攻击者通过在LS或GET中的“..”来列出或阅读任意文件。 漏洞英文描述: Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET. 漏洞参考: Reference: BUGTRAQ:20010526 GuildFTPD v0.97 Directory Traversal / Weak password encryption Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html Reference: MISC:http://www.nitrolic.com/ Reference: BID:2789 Reference: URL: 系统类型: Unix/Linux Win95/98/ME Win2000/NT 漏洞类型:输入有效性检查错误