CVE-2001-0264

MEDIUM 5.0CVE-2001-0264 · Published 18/06/2001 · updated 16/06/2026

In short

CVE-2001-0264 is a MEDIUM (CVSS 5.0) vulnerability affecting g6 ftp server (gene6).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
g6 ftp server gene6	`= 2.0`	No fix yet

Description

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.

References

atstake.com/research/advisories/2001/a040301-1.txt · Patch
securityfocus.com/bid/2534 · Exploit

More vulnerabilities in g6 ftp server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free