Lucene search
HistoryMar 06, 2009 - 6:30 p.m.
CVE-2008-6424
cve
2008
6424
ffftp
directory traversal
remote servers
ftp
list command
file creation
file overwrite
security vulnerability
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:C/A:C
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a … (dot dot).
Affected configurations
Node
jun_sotaffftpMatch1.96b
| CPE | Name | Operator | Version |
|---|---|---|---|
| jun_sota:ffftp | jun sota ffftp | eq | 1.96b |
Related
openvas
openvas
FFFTP LIST Command Directory Traversal Vulnerability
2009-03-13 00:00:00
FFFTP LIST Command Directory Traversal Vulnerability
2009-03-13 00:00:00
prion
prion
Directory traversal
2009-03-06 18:30:00
cvelist
cvelist
CVE-2008-6424
2009-03-06 18:00:00
nvd
nvd
CVE-2008-6424
2009-03-06 18:30:00
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:C/A:C
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
Related for CVE-2008-6424