[email protected]CVE-2010-2425

HistoryJun 24, 2010 - 12:17 p.m.

CVE-2010-2425

2010-06-2412:17:00

CWE-22

[email protected]

web.nvd.nist.gov

security

vulnerability

titanftpd

south river technologies

titan ftp server

directory traversal

remote authenticated users

comb command

nvd

cve-2010-2425

6.4 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.2%

JSON

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via “…//” sequences in a COMB command.

CPENameOperatorVersion
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq5.25.356
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq5.10.328
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq2.31.152
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq5.05.321
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq5.02.307
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq8.00
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq6.26.630
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq6.01.512
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq1.1.33
southrivertech:titan_ftp_serversouthrivertech titan ftp servereq4.13.260

CPE	Name	Operator	Version
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	5.25.356
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	5.10.328
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	2.31.152
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	5.05.321
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	5.02.307
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	8.00
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	6.26.630
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	6.01.512
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	1.1.33
southrivertech:titan_ftp_server	southrivertech titan ftp server	eq	4.13.260

Rows per page:

1-10 of 1261

References

secunia.com/advisories/40237

www.osvdb.org/65622

www.securityfocus.com/archive/1/511873/100/0/threaded

www.securityfocus.com/bid/40949

6.4 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for CVE-2010-2425

prion1 cvelist1 openvas2