CVE-2001-1335

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-05-27 · updated 2026-06-16

Description

Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot).

Affected products

Aclogic Cesarftp: 0.98b

References

http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html
http://www.iss.net/security_center/static/6606.php
http://www.securityfocus.com/bid/2786
http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html
http://www.iss.net/security_center/static/6606.php
http://www.securityfocus.com/bid/2786

Get alerted when CVE-2001-1335 or the next vulnerability affects your stack