CVE-2005-0372

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP...

5.0 MediumFix available

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Exploit likelihood

4.38%Up 2.8 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Record: CVE-2005-0372
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Record: CVE-2005-0372
Updated: 2026-11-02

EUVDEUVD-2005-0373 No score

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Record: EUVD-2005-0373
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q4r9-w6v3-92hp No score

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP...

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Record: GHSA-q4r9-w6v3-92hp
Weakness: CWE-22
Updated: 2026-11-02

OSV No score

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Record: CVE-2005-0372
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-0372 No score

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Record: DEBIAN-CVE-2005-0372
Updated: 2026-11-02

Affected products

gnome gtk

Affected packages

Affected packages
Package	Affected	Fixed
`gftp` Debian:12	before 2.0.18-1	2.0.18-1
`gftp` Debian:13	before 2.0.18-1	2.0.18-1
`gftp` Debian:14	before 2.0.18-1	2.0.18-1
`gftp` Debian:3.0	before 2.0.11-1woody1, plus listed versions 2.0.11-1	2.0.11-1woody1
`gftp` Red Hat:enterprise_linux:3::as	before 1:2.0.14-4	1:2.0.14-4
`gftp-debuginfo` Red Hat:enterprise_linux:3::as	before 1:2.0.14-4	1:2.0.14-4
`gftp` Red Hat:enterprise_linux:3::desktop	before 1:2.0.14-4	1:2.0.14-4
`gftp-debuginfo` Red Hat:enterprise_linux:3::desktop	before 1:2.0.14-4	1:2.0.14-4
`gftp` Red Hat:enterprise_linux:3::es	before 1:2.0.14-4	1:2.0.14-4
`gftp-debuginfo` Red Hat:enterprise_linux:3::es	before 1:2.0.14-4	1:2.0.14-4

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`gftp` Red Hat:enterprise_linux:3::ws	before 1:2.0.14-4	1:2.0.14-4
`gftp-debuginfo` Red Hat:enterprise_linux:3::ws	before 1:2.0.14-4	1:2.0.14-4
`gftp` Red Hat:enterprise_linux:4::as	before 1:2.0.17-5	1:2.0.17-5
`gftp-debuginfo` Red Hat:enterprise_linux:4::as	before 1:2.0.17-5	1:2.0.17-5
`gftp` Red Hat:enterprise_linux:4::desktop	before 1:2.0.17-5	1:2.0.17-5
`gftp-debuginfo` Red Hat:enterprise_linux:4::desktop	before 1:2.0.17-5	1:2.0.17-5
`gftp` Red Hat:enterprise_linux:4::es	before 1:2.0.17-5	1:2.0.17-5
`gftp-debuginfo` Red Hat:enterprise_linux:4::es	before 1:2.0.17-5	1:2.0.17-5
`gftp` Red Hat:enterprise_linux:4::ws	before 1:2.0.17-5	1:2.0.17-5
`gftp-debuginfo` Red Hat:enterprise_linux:4::ws	before 1:2.0.17-5	1:2.0.17-5

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0372 is a medium vulnerability (CVSS 5.0) in Gnome Gtk, published February 17, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.38%, the 91st percentile. Fixed in gftp 2.0.18-1.

References

Show 14 moreShow less