Lucene search
HistoryMar 10, 2008 - 5:44 p.m.
CVE-2008-1221
cve-2008-1221
absolute path traversal
microworld escan
ftp server
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
91.0%
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.
Affected configurations
Node
microworld_technologiesescanMatch9.0.742.98corporate
ORmicroworld_technologiesescan_management_consoleMatch9.0.742.1
ORmicroworld_technologiesescan_serverMatch9.0.742.1
Related
cvelist
cvelist
CVE-2008-1221
2008-03-10 17:00:00
nessus
nessus
prion
prion
Path traversal
2008-03-10 17:44:00
nvd
nvd
CVE-2008-1221
2008-03-10 17:44:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
91.0%
Related for CVE-2008-1221