Back to Database
Status published
High
CVE-2005-1646
The default installation of Fastream NETFile FTP/Web Server 7.4.6, which...
Vulnerability Description
The default installation of Fastream NETFile FTP/Web Server 7.4.6, which supports FXP, does not require that the IP address in a PORT command be the same as the IP of the logged in user, which allows remote attackers to conduct FTP Bounce attacks to bypass firewall rules or cause a denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1646
Credits & Attribution
No credits recorded in the NVD database.
References
More from fastream
View All →CVE-2004-2534
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection...
High
7.8
CVE-2004-1941
Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause...
Medium
5
CVE-2004-0677
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers...
Medium
5
CVE-2004-0676
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and...
Critical
10
CVE-2001-0256
FaSTream FTP++ Server 2.0 allows remote attackers to cause a...
High
7.5
Affected Vendor
fastream
View all reports →Affected Software
netfile ftp web server
Vulnerable Versions:
7.4.6
Timeline
Official Publish:
May 18th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.