Every CVE Search/ Get API key

CVE-2002-1943

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address...

5.0 MediumPublic exploit

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Exploit likelihood

2.70%Down 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Record
CVE-2002-1943
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Record
CVE-2002-1943
Updated
2026-11-02
EUVDEUVD-2002-1922 No score

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Record
EUVD-2002-1922
Updated
2026-11-03
GitHub AdvisoriesGHSA-vxqr-c7pc-f8vf No score

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address...

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Record
GHSA-vxqr-c7pc-f8vf
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSafeTP 1.46 - Passive Mode Internal IP Address Revealing2002-09-28

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1943 is a medium vulnerability (CVSS 5.0) in Safetp Server, published December 31, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.70%, the 86th percentile. No source names a fixed version.

References

MoveEnter Open