CVE-2001-0698: Netwin Surgeftp

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.

Affected products

• Netwin Surgeftp: version 1.0b only; version 2.0a only

Published 2001-09-20. Last modified 2026-06-16.