CVE-2002-1345: Ncftp Software Ncftp

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.

Affected products

• Ncftp Software Ncftp: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.1.0 only; …
• OpenBSD OpenBSD: version 3.0 only
• Sun Solaris: version 2.6 only; version 7.0 only
• Sun Sunos: affected versions not specified; version 5.7 only

Published 2002-12-23. Last modified 2026-06-16.