Vendor

Evolvable Corporation

Products

CVEs

Across products

Status

Private

Products

CVE	Risk	CVSS	EPSS	Published	Description
CVE-2002-0876	0.03	—	0.05	Oct 4, 2002	Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
CVE-2001-0758	0.03	—	0.43	Oct 18, 2001	Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.
CVE-2000-0953	0.03	—	0.06	Dec 19, 2000	Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
CVE-2002-0877	0.00	—	0.03	Oct 4, 2002	Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
CVE-2000-0954	0.00	—	0.00	Dec 19, 2000	Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.

CVE-2002-0876Oct 4, 2002
risk 0.03cvss —epss 0.05
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
CVE-2001-0758Oct 18, 2001
risk 0.03cvss —epss 0.43
Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.
CVE-2000-0953Dec 19, 2000
risk 0.03cvss —epss 0.06
Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
CVE-2002-0877Oct 4, 2002
risk 0.00cvss —epss 0.03
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
CVE-2000-0954Dec 19, 2000
risk 0.00cvss —epss 0.00
Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.