https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-0877.htmlhttps://patchthecve.com/cve/CVE-2002-0877.htmlTue, 16 Jun 2026 21:58:18 +0000MEDIUM 5.0: Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.https://patchthecve.com/cve/CVE-2002-0876.htmlhttps://patchthecve.com/cve/CVE-2002-0876.htmlTue, 16 Jun 2026 21:58:18 +0000MEDIUM 5.0: Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.https://patchthecve.com/cve/CVE-2001-0758.htmlhttps://patchthecve.com/cve/CVE-2001-0758.htmlTue, 16 Jun 2026 21:54:54 +0000HIGH 7.5: Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.https://patchthecve.com/cve/CVE-2000-0954.htmlhttps://patchthecve.com/cve/CVE-2000-0954.htmlWed, 23 Sep 2026 13:10:00 +0000HIGH 10.0: Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.https://patchthecve.com/cve/CVE-2000-0953.htmlhttps://patchthecve.com/cve/CVE-2000-0953.htmlWed, 23 Sep 2026 13:10:00 +0000MEDIUM 5.0: Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.