CVE-2005-0372

MITTEL 5.0CVE-2005-0372 · Published 02/05/2005 · updated 16/06/2026

Kurz gesagt

CVE-2005-0372 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in gtk (gnome).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.4%, höher als bei 91.3% aller Schwachstellen.
Abhilfe: auf 2.0.18 oder neuer aktualisieren.

Package	Affected versions	Patched versions
gtk gnome	`< 2.0.18`	`2.0.18`

Description

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

References

distro.conectiva.com.br/atualizacoes · Third Party Advisory
debian.org/security/2005/dsa-686 · Patch
gentoo.org/security/en/glsa/glsa-200502-27.xml · Patch
mandriva.com/security/advisories · Broken Link
redhat.com/support/errata/RHSA-2005-410.html · Third Party Advisory
securityfocus.com/advisories/8379 · Third Party Advisory
securityfocus.com/advisories/8380 · Third Party Advisory
securityfocus.com/bid/12539 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A717 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9923 · Broken Link

Weitere Schwachstellen in gtk

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gtk

gnome

< 2.0.18

2.0.18

Weitere Schwachstellen in gtk

Alle anzeigen →