{"uuid": "d9449772-c278-413b-b2f8-76e517e90c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0920", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/pop2/uw_fileretrieval.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"aushack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the FOLD command of the\\n          University of Washington ipop2d service. By specifying an arbitrary\\n          folder name it is possible to retrieve any file which is world or group\\n          readable by the user ID of the POP account. This vulnerability can only\\n          be exploited with a valid username and password. The From address is\\n          the file owner.\", \"disclosure_date\": \"2000-07-14\", \"fullname\": \"auxiliary/admin/pop2/uw_fileretrieval\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"UoW pop2d Remote File Retrieval Vulnerability\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/pop2/uw_fileretrieval.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/pop2/uw_fileretrieval\", \"references\": [\"CVE-1999-0920\", \"OSVDB-368\", \"BID-1484\"], \"rport\": 109, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:54.785421Z"}