CVE-2004-2309: Crob FTP Server

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.

Affected products

• Crob Crob FTP Server: version 3.5.1 only

Published 2004-12-31. Last modified 2026-06-16.