Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    20 Nov 2024, 23:54
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://secunia.com/advisories/40370 - Vendor Advisory | |
| References | () http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644 - Vendor Advisory | |
| References | () http://www.cerberusftp.com/releasenotes.html - | |
| References | () http://www.securityfocus.com/bid/41285 - | 
Information
                Published : 2010-07-02 20:30
Updated : 2025-04-11 00:51
NVD link : CVE-2004-2769
Mitre link : CVE-2004-2769
CVE.ORG link : CVE-2004-2769
JSON object : View
Products Affected
                cerberusftp
- ftp_server
CWE
                
                    
                        
                        CWE-264
                        
            Permissions, Privileges, and Access Controls
