CVE-2002-1545

CVE-2002-1545 describes an information disclosure vulnerability in CooolSoft Personal FTP Server 2.24, allowing remote attackers to obtain the absolute pathname of the FTP root directory. This is achieved by issuing a PWD command, which causes the server to include the full path in its response. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, potentially leading to disclosure of sensitive system information. While there is no known active exploitation, public exploit code, or Metasploit modules, the CVE has garnered significant community discussion, suggesting awareness among security researchers.