Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2004-2747


Vulnerability Score 4.0 4.0
CVE Id CVE-2004-2747
Last Modified 05 Sep 2008 04:45:00
Published 31 Dec 2004 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication SINGLE_INSTANCE



Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not.

Vulnerable Systems


  • Pablo Software Solutions Quick N Easy Ftp Server 1.77


BID - 9443

SECTRACK - 1008756

BUGTRAQ - 20040118 Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory

OSVDB - 3574

SECUNIA - 10661

Last Updated: 27 May 2016 10:39:36