CVE-2004-2488

CVE-2004-2488 describes a directory traversal vulnerability in Nexgen FTP Server versions prior to 2.2.3.23. Authenticated remote attackers can exploit this flaw by using "C:" sequences within FTP commands like RETR, NLST, LIST, RNFR, or RNTO to read or list arbitrary files outside their intended directories. The vulnerability has a CVSS score of 4.0, indicating a medium severity. It requires authentication (Au:S) and has low attack complexity (AC:L), allowing for partial confidentiality impact (C:P) but no integrity or availability impact. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.