{"id":"CVE-2002-1544","aliases":["EUVD-2002-1526","GHSA-4q27-9cff-wvg9"],"status":"published","title":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers...","description":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01581,"percentile":0.75693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-03-18T05:00:00Z","modified":"2026-06-16T21:59:31Z","products":[{"vendor":"cooolsoft","product":"personal_ftp_server"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1544"},{"url":"https://github.com/advisories/GHSA-4q27-9cff-wvg9"}],"sources":{"cve":[{"id":"CVE-2002-1544","description":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.","status":"published","published":"2003-03-18T05:00:00Z","modified":"2024-08-08T03:26:28.728Z","updated_at":"2026-11-02T14:33:54.972584Z"}],"euvd":[{"id":"EUVD-2002-1526","description":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.","status":"published","published":"2003-03-18T05:00:00Z","modified":"2024-08-08T03:26:28Z","updated_at":"2026-11-03T01:14:55.73497Z"}],"ghsa":[{"id":"GHSA-4q27-9cff-wvg9","title":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers...","description":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.","status":"published","published":"2022-04-30T18:21:22Z","modified":"2023-01-30T05:06:24Z","updated_at":"2026-11-02T14:47:29.130906Z"}],"nvd":[{"id":"CVE-2002-1544","description":"Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.","status":"published","published":"2003-03-31T05:00:00Z","modified":"2026-06-16T21:59:31.557Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:44.251133Z"}]}}