CVE-2001-0696

MEDIUM 5.0CVE-2001-0696 · Published 20/09/2001 · updated 16/06/2026

In short

CVE-2001-0696 is a MEDIUM (CVSS 5.0) vulnerability affecting surgeftp (netwin).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
surgeftp netwin	`= 1.0b= 2.0a`	No fix yet

Description

NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.

References

netwinsite.com/surgeftp/manual/updates.htm
securityfocus.com/archive/1/191916 · Exploit
securityfocus.com/bid/2891 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/6712

More vulnerabilities in surgeftp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free