CVE-2004-2747

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not.

Affected products

Pablo Software Solutions Quick N Easy Ftp Server: 1.77

References

http://secunia.com/advisories/10661
http://www.osvdb.org/3574
http://www.securityfocus.com/archive/1/350224/30/21640/threaded
http://www.securityfocus.com/bid/9443
http://www.securitytracker.com/id?1008756
http://secunia.com/advisories/10661
http://www.osvdb.org/3574
http://www.securityfocus.com/archive/1/350224/30/21640/threaded
http://www.securityfocus.com/bid/9443
http://www.securitytracker.com/id?1008756

Get alerted when CVE-2004-2747 or the next vulnerability affects your stack