Lucene search

K
cveMitreCVE-2008-2821
HistoryJun 23, 2008 - 5:41 p.m.

CVE-2008-2821

2008-06-2317:41:00
CWE-22
mitre
web.nvd.nist.gov
27
cve-2008-2821
directory traversal
ftp client
glub tech secure ftp
windows
remote ftp servers

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

51.2%

Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a …\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.

Affected configurations

Nvd
Node
microsoftwindows_nt
AND
glubsecure_ftpRange2.5.15
VendorProductVersionCPE
microsoftwindows_nt*cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*
glubsecure_ftp*cpe:2.3:a:glub:secure_ftp:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

51.2%