CVE-2001-0450: Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary

Q: How do I fix CVE-2001-0450?

broker ftp server: upgrade to newer than 5.5. Exact commands for each OS are on this page.

Q: Is CVE-2001-0450 being exploited?

CVE-2001-0450 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2001-0450 affect?

CVE-2001-0450 affects broker ftp server. Severity is medium (CVSS 6.4). Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.

Q: How urgent is CVE-2001-0450?

Priority 42/100. No elevated risk signals yet.

This month

MEDIUM 6.4UPGRADE

CVE-2001-0450 is a medium-severity flaw (CVSS 6.4) affecting broker ftp server. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	6.4 (Medium)
EPSS exploit chance	1.7% (top 23%)
CISA exploited list	No
Published	2001-06-27
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: transsoft

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2001-06-27 04:00 UTCPublished CVE record published
2026-06-16 21:54 UTCUpdated Record last modified

transsoft broker ftp server UPGRADE

Affected: <= 5.5

Fixed in: newer than 5.5

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy broker-ftp-server || rpm -q broker-ftp-server || broker-ftp-server --version

2. UPGRADE to newer than 5.5 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade broker-ftp-server

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade broker-ftp-server

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2001-0450?

broker ftp server: upgrade to newer than 5.5. Exact commands for each OS are on this page.

Is CVE-2001-0450 being exploited?

CVE-2001-0450 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2001-0450 affect?

CVE-2001-0450 affects broker ftp server. Severity is medium (CVSS 6.4). Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.

How urgent is CVE-2001-0450?

Priority 42/100. No elevated risk signals yet.

Related CVEs

CVE-2004-0296 MEDIUM 5.0 DOWNGRADE TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception b
CVE-2004-0295 MEDIUM 5.0 DOWNGRADE TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via
CVE-2002-0405 HIGH 10.0 DOWNGRADE Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of ser
CVE-2001-1042 HIGH 7.5 DOWNGRADE Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (
CVE-2001-0688 MEDIUM 5.0 DOWNGRADE Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an inval

References

← Back to latest CVEs