CVE-2002-1544: Cooolsoft Personal FTP Server

Medium severity, CVSS 6.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.

Affected products

• Cooolsoft Personal FTP Server: version 2.24 only

Published 2003-03-31. Last modified 2026-06-16.