CVE-2005-0372 Path traversal in n/a

Medium 5.0 Published 17 Feb 2005 Updated 7 Aug 2024

A malicious FTP server can read arbitrary local files on a user's system via directory traversal in gftp filenames.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2005-0372?

CVE-2005-0372 is a medium-severity path traversal vulnerability in n/a, published on 17 Feb 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Weakness: CWE-22

Which versions are affected by CVE-2005-0372?

It affects 1 product.

Linux distribution packages (16)

`gftp` Red Hat:enterprise_linux:3::as	All versions	`1:2.0.14-4`
`gftp-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`1:2.0.14-4`
`gftp` Red Hat:enterprise_linux:3::desktop	All versions	`1:2.0.14-4`
`gftp-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`1:2.0.14-4`
`gftp` Red Hat:enterprise_linux:3::es	All versions	`1:2.0.14-4`
`gftp-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`1:2.0.14-4`
`gftp` Red Hat:enterprise_linux:3::ws	All versions	`1:2.0.14-4`
`gftp-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`1:2.0.14-4`
`gftp` Red Hat:enterprise_linux:4::as	All versions	`1:2.0.17-5`
`gftp-debuginfo` Red Hat:enterprise_linux:4::as	All versions	`1:2.0.17-5`
`gftp` Red Hat:enterprise_linux:4::desktop	All versions	`1:2.0.17-5`
`gftp-debuginfo` Red Hat:enterprise_linux:4::desktop	All versions	`1:2.0.17-5`
`gftp` Red Hat:enterprise_linux:4::es	All versions	`1:2.0.17-5`
`gftp-debuginfo` Red Hat:enterprise_linux:4::es	All versions	`1:2.0.17-5`
`gftp` Red Hat:enterprise_linux:4::ws	All versions	`1:2.0.17-5`
`gftp-debuginfo` Red Hat:enterprise_linux:4::ws	All versions	`1:2.0.17-5`

Products include Gnome Gtk.

How do I fix CVE-2005-0372?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2005-0372 being exploited?

There is no known exploitation of CVE-2005-0372 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2005-0372, DSA-686-1, GHSA-q4r9-w6v3-92hp, RHSA-2005:410.