Vulnerabilities

TI-2002-00851 CVE-2002-0877 · GHSA-vq9f-9qrj-j94q

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote…

LOW 27

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02039 Published 2002-08-31 No fix listed

TI-2002-00850 CVE-2002-0876 · GHSA-cg2m-g6cj-f8gc

LOW 33

Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07169 Published 2002-08-31 No fix listed

TI-2001-00729 CVE-2001-0758 · GHSA-rc2w-wpf9-mqc6

MEDIUM 40

Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04181 Published 2001-10-12 No fix listed

TI-2000-00943 CVE-2000-0953 · GHSA-9vc2-9r44-hc96

LOW 28

Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03104 Published 2001-01-22 No fix listed

TI-2000-00944 CVE-2000-0954 · GHSA-37v3-5w3g-89m6

MEDIUM 47

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01851 Published 2000-11-29 No fix listed