CVE-2004-0676: Fastream Netfile FTP Web Server

High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.

Affected products

• Fastream Netfile FTP Web Server: version 6.5.1.980 only; version 6.5.1.981 only; version 6.7.2.1085 only

Published 2004-08-06. Last modified 2026-06-16.