Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

ALTools ALFTP FTP Server can reveal its install folder

CVE-2006-5950 · published 19 years ago
Summary

The ALFTP FTP Server (version 4.1 beta 1 and possibly earlier) can disclose the directory where it is installed when a logged‑in user runs a rename command. This information can help an attacker plan further attacks on the system. Apply any available updates from the vendor or restrict remote access to trusted users until a fix is released.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
altools alftp_ftp_server 4.1_beta1
cpe:2.3:a:altools:alftp_ftp_server:4.1_beta1:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote authenticated users to obtain the installation path via unknown vectors related to the REN comm...
Unspecified vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, probably due to response messages. NOTE: the provenance of this information is unknown; details are obtained from third party sources.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published17 Nov 2006
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-5950 · NVD
Track software like this
Free during beta