CVE-2004-2769: Cerberusftp FTP Server

Medium severity, CVSS 4.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.

Affected products

• Cerberusftp FTP Server: up to and including 4.0.2.2; version 1.0 only; version 1.01 only; version 1.1 only; version 1.2 only; version 1.02 only; …

Published 2010-07-02. Last modified 2026-06-16.