CVE-2001-0054

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-02-16 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. (dot dot) attack.

Affected products

SolarWinds Serv-U File Server: 3.0.0.16

References

http://archives.neohapsis.com/archives/bugtraq/2000-12/0043.html
http://marc.info/?l=bugtraq&m=97604119024280&w=2
http://www.osvdb.org/464
http://www.securityfocus.com/bid/2052
https://exchange.xforce.ibmcloud.com/vulnerabilities/5639
http://archives.neohapsis.com/archives/bugtraq/2000-12/0043.html
http://marc.info/?l=bugtraq&m=97604119024280&w=2
http://www.osvdb.org/464
http://www.securityfocus.com/bid/2052
https://exchange.xforce.ibmcloud.com/vulnerabilities/5639

Get alerted when CVE-2001-0054 or the next vulnerability affects your stack