CVE-2004-0676
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier...
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
- Record
CVE-2004-0676- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
- Record
CVE-2004-0676- Updated
- 2026-11-02
EUVDEUVD-2004-0675 No score
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
- Record
EUVD-2004-0675- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g726-rjgf-ww3c No score
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier...
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
- Record
GHSA-g726-rjgf-ww3c- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal | 2004-07-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0676 is a high vulnerability (CVSS 10.0) in Fastream Netfile Ftp Web Server, published July 13, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.29%, the 91st percentile. No source names a fixed version.