CVE-2001-0687

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-09-20 · updated 2026-06-16

Description

Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by (1) issuing a CD command (CD C:) followed by the LS command, (2) specifying arbitrary paths in the UNC format (\\computername\sharename).

Affected products

Transsoft Broker Ftp Server: through 5.9.5.0; 4.0, 4.7.5.0, 5.0, 5.1

References

http://www.securityfocus.com/archive/1/190032
http://www.securityfocus.com/bid/2853
https://exchange.xforce.ibmcloud.com/vulnerabilities/6674
http://www.securityfocus.com/archive/1/190032
http://www.securityfocus.com/bid/2853
https://exchange.xforce.ibmcloud.com/vulnerabilities/6674

Get alerted when CVE-2001-0687 or the next vulnerability affects your stack