Lucene search

K
cve[email protected]CVE-2008-2894
HistoryJun 27, 2008 - 6:41 p.m.

CVE-2008-2894

2008-06-2718:41:00
CWE-22
web.nvd.nist.gov
19
nch software
classic ftp
ftp client
windows
directory traversal
vulnerability
cve-2008-2894
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.6%

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a … (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.

Affected configurations

NVD
Node
nch_softwarench_software_classic_ftpMatch1.02windows

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.6%