← back
CVE-2004-2487

CVE-2004-2487

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 3.0%
from disclosure to weapon0 days
Published on NVDOct 25
1st PoCMar 24
exploitation probability
3.0%top 14% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) "..", (2) "\..\" (backslash dot dot), or (3) "/../" sequences in (a) RETR (get), (b) NLST (ls), (c) LIST (ls), (d) RNFR, or (e) RNTO FTP commands.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.