CVE-2001-0696: Netwin Surgeftp

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.

Affected products

• Netwin Surgeftp: version 1.0b only; version 2.0a only

Published 2001-09-20. Last modified 2026-06-16.