{"api_version":"1","generated_at":"2026-07-23T12:46:18+00:00","cve":"CVE-2006-5981","urls":{"html":"https://cve.report/CVE-2006-5981","api":"https://cve.report/api/cve/CVE-2006-5981.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-5981","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-5981"},"summary":{"title":"CVE-2006-5981","description":"Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-11-20 21:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.osvdb.org/30448","name":"http://www.osvdb.org/30448","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30332","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30332","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/4540","name":"http://www.vupen.com/english/advisories/2006/4540","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22928","name":"http://secunia.com/advisories/22928","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Selenium Server FTP Server Two Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html","name":"http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[exploits] BiBa Software Selenium FTP Vulnerabilities","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-5981","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5981","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"5981","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"biba_software","cpe5":"seleniumserver_ftp_server","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T20:12:31.315Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"22928","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22928"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html"},{"name":"30448","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/30448"},{"name":"selenium-server-directory-traversal(30332)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30332"},{"name":"ADV-2006-4540","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/4540"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-11-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"22928","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22928"},{"tags":["x_refsource_MISC"],"url":"http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html"},{"name":"30448","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/30448"},{"name":"selenium-server-directory-traversal(30332)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30332"},{"name":"ADV-2006-4540","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/4540"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5981","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"22928","refsource":"SECUNIA","url":"http://secunia.com/advisories/22928"},{"name":"http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html","refsource":"MISC","url":"http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html"},{"name":"30448","refsource":"OSVDB","url":"http://www.osvdb.org/30448"},{"name":"selenium-server-directory-traversal(30332)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30332"},{"name":"ADV-2006-4540","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/4540"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-5981","datePublished":"2006-11-20T21:00:00.000Z","dateReserved":"2006-11-20T00:00:00.000Z","dateUpdated":"2024-08-07T20:12:31.315Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-11-20 21:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:biba_software:seleniumserver_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3E79A0B4-2C29-4AF1-902E-B431F1E10348"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"5981","Ordinal":"1","Title":"CVE-2006-5981","CVE":"CVE-2006-5981","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"5981","Ordinal":"1","NoteData":"Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands.","Type":"Description","Title":"CVE-2006-5981"},{"CveYear":"2006","CveId":"5981","Ordinal":"2","NoteData":"2006-11-20","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"5981","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}