VYPR
Unrated severityNVD Advisory· Published Aug 22, 2001· Updated Jun 16, 2026

CVE-2001-0582

CVE-2001-0582

Description

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:a:ben_spink:crushftp_ftp_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ben_spink:crushftp_ftp_server:*:*:*:*:*:*:*:*range: <=2.1.6
    • cpe:2.3:a:ben_spink:crushftp_ftp_server:2.1.4:*:*:*:*:*:*:*
  • Range: <=2.1.6

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.