OVAL Repository - View Definition: oval:org.mitre.oval:def:1416

Open Vulnerability and Assessment Language (OVAL)

News — July 2, 2009

OVAL Repository > View Definition

View Definition

NEW SEARCH : BACK

Definition Id: oval:org.mitre.oval:def:1416		Date: 2005-10-12
Title:	FTP Download Destination Tampering Vulnerability (Windows XP)
Description:	The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.
Version:	1	Class:	vulnerability
Status:	ACCEPTED	Reference(s):	CVE-2005-2126
Family:	windows
Platform(s):	Microsoft Windows XP	Product(s):	Operating System
Definition Synopsis:
Windows XP is installed AND Win2K/XP/2003 service pack 1 is installed AND msieftp.dll is less than 6.0.2800.1724

NEW SEARCH : BACK

Section Contents
About the Repository
Authoring Style Guide
Submission Guidelines
OVAL Definition Lifecycle
Statement of CVE Compatibility
Top Contributor Awards
Other Repositories
Join Repository Forum
Forum Archives
Terms of Use


	OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. The OVAL Web site is hosted by The MITRE Corporation. Copyright 2002-2009, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation. Contact oval@mitre.org for more information.	Privacy policy Terms of use