Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

TYPSoft FTP Server lets logged‑in users view any folder

CVE-2002-0558 · published 24 years ago
Summary

The TYPSoft FTP Server (version 0.97.1 and earlier) lets anyone who can log in – even an anonymous user – ask the server to show the contents of any directory on the system. This could expose sensitive files or configuration data. Upgrade to a newer version or restrict access to trusted users to stop the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
typsoft typsoft_ftp_server 0.85
0.93
0.95
0.96
0.97
cpe:2.3:a:typsoft:typsoft_ftp_server:0.85:*:*:*:*:*:*:*
Original advisory text
Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command endi...
Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* characters.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published3 Jul 2002
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2002-0558 · NVD
Track software like this
Free during beta