Skip to content

CVE-2002-0877

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to...

5.0 Medium

CVE-2002-0877 is a medium vulnerability (CVSS 5.0) in Evolvable Corporation Shambala Server, published August 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

Exploit likelihood

2.04%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

Record: CVE-2002-0877
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

Record: CVE-2002-0877
Updated: 2026-11-02

EUVDEUVD-2002-0869 No score

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

Record: EUVD-2002-0869
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vq9f-9qrj-j94q No score

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to...

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.

Record: GHSA-vq9f-9qrj-j94q
Updated: 2026-11-02

Affected products

evolvable corporation shambala server

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References