CVE-2005-2126: Microsoft Ie

Low severity, CVSS 2.6. EPSS: 14.4% chance of exploitation in the next 30 days.

The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version r2 only
• Microsoft Windows XP: any version

Published 2005-10-21. Last modified 2026-06-16.