Lucene search
HistoryJun 24, 2010 - 12:17 p.m.
CVE-2010-2426
titanftpd
directory traversal
remote authentication
arbitrary files
nvd
cve-2010-2426
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.072 Low
EPSS
Percentile
94.1%
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via “…//” sequences in the xcrc command.
Affected configurations
Node
southrivertechtitan_ftp_serverRange≤8.10.1125
ORsouthrivertechtitan_ftp_serverMatch1.0.17
ORsouthrivertechtitan_ftp_serverMatch1.0.18
ORsouthrivertechtitan_ftp_serverMatch1.0.19
ORsouthrivertechtitan_ftp_serverMatch1.0.20
ORsouthrivertechtitan_ftp_serverMatch1.0.21
ORsouthrivertechtitan_ftp_serverMatch1.0.22
ORsouthrivertechtitan_ftp_serverMatch1.0.23
ORsouthrivertechtitan_ftp_serverMatch1.0.24
ORsouthrivertechtitan_ftp_serverMatch1.0.25
ORsouthrivertechtitan_ftp_serverMatch1.0.26
ORsouthrivertechtitan_ftp_serverMatch1.0.27
ORsouthrivertechtitan_ftp_serverMatch1.0.28
ORsouthrivertechtitan_ftp_serverMatch1.0.29
ORsouthrivertechtitan_ftp_serverMatch1.0.30
ORsouthrivertechtitan_ftp_serverMatch1.0.31
ORsouthrivertechtitan_ftp_serverMatch1.1.33
ORsouthrivertechtitan_ftp_serverMatch1.11.34
ORsouthrivertechtitan_ftp_serverMatch2.0.44beta
ORsouthrivertechtitan_ftp_serverMatch2.00.95
ORsouthrivertechtitan_ftp_serverMatch2.01.96
ORsouthrivertechtitan_ftp_serverMatch2.02.99
ORsouthrivertechtitan_ftp_serverMatch2.10.119
ORsouthrivertechtitan_ftp_serverMatch2.10.120
ORsouthrivertechtitan_ftp_serverMatch2.10.121
ORsouthrivertechtitan_ftp_serverMatch2.11.132
ORsouthrivertechtitan_ftp_serverMatch2.20.140
ORsouthrivertechtitan_ftp_serverMatch2.21.142
ORsouthrivertechtitan_ftp_serverMatch2.30.151
ORsouthrivertechtitan_ftp_serverMatch2.31.152
ORsouthrivertechtitan_ftp_serverMatch2.40.155
ORsouthrivertechtitan_ftp_serverMatch3.00.162
ORsouthrivertechtitan_ftp_serverMatch3.01.163
ORsouthrivertechtitan_ftp_serverMatch3.02.165
ORsouthrivertechtitan_ftp_serverMatch3.10.169
ORsouthrivertechtitan_ftp_serverMatch3.12.172
ORsouthrivertechtitan_ftp_serverMatch3.20.175
ORsouthrivertechtitan_ftp_serverMatch3.21.177
ORsouthrivertechtitan_ftp_serverMatch3.22.178
ORsouthrivertechtitan_ftp_serverMatch3.30.186
ORsouthrivertechtitan_ftp_serverMatch4.00.245
ORsouthrivertechtitan_ftp_serverMatch4.01.246
ORsouthrivertechtitan_ftp_serverMatch4.02.248
ORsouthrivertechtitan_ftp_serverMatch4.03.249
ORsouthrivertechtitan_ftp_serverMatch4.05.252
ORsouthrivertechtitan_ftp_serverMatch4.10.256
ORsouthrivertechtitan_ftp_serverMatch4.11.257
ORsouthrivertechtitan_ftp_serverMatch4.13.260
ORsouthrivertechtitan_ftp_serverMatch4.14.261
ORsouthrivertechtitan_ftp_serverMatch4.20.263
ORsouthrivertechtitan_ftp_serverMatch4.21.264
ORsouthrivertechtitan_ftp_serverMatch4.22.265
ORsouthrivertechtitan_ftp_serverMatch4.23.266
ORsouthrivertechtitan_ftp_serverMatch4.30.269
ORsouthrivertechtitan_ftp_serverMatch4.31.272
ORsouthrivertechtitan_ftp_serverMatch5.00.303
ORsouthrivertechtitan_ftp_serverMatch5.01.306
ORsouthrivertechtitan_ftp_serverMatch5.02.307
ORsouthrivertechtitan_ftp_serverMatch5.03.308
ORsouthrivertechtitan_ftp_serverMatch5.03.309
ORsouthrivertechtitan_ftp_serverMatch5.03.310
ORsouthrivertechtitan_ftp_serverMatch5.04.311
ORsouthrivertechtitan_ftp_serverMatch5.04.312
ORsouthrivertechtitan_ftp_serverMatch5.04.313
ORsouthrivertechtitan_ftp_serverMatch5.04.314
ORsouthrivertechtitan_ftp_serverMatch5.04.315
ORsouthrivertechtitan_ftp_serverMatch5.05.316
ORsouthrivertechtitan_ftp_serverMatch5.05.317
ORsouthrivertechtitan_ftp_serverMatch5.05.318
ORsouthrivertechtitan_ftp_serverMatch5.05.319
ORsouthrivertechtitan_ftp_serverMatch5.05.320
ORsouthrivertechtitan_ftp_serverMatch5.05.321
ORsouthrivertechtitan_ftp_serverMatch5.05.322
ORsouthrivertechtitan_ftp_serverMatch5.05.323
ORsouthrivertechtitan_ftp_serverMatch5.05.324
ORsouthrivertechtitan_ftp_serverMatch5.05.325
ORsouthrivertechtitan_ftp_serverMatch5.05.326
ORsouthrivertechtitan_ftp_serverMatch5.05.327
ORsouthrivertechtitan_ftp_serverMatch5.10.328
ORsouthrivertechtitan_ftp_serverMatch5.10.329
ORsouthrivertechtitan_ftp_serverMatch5.11.330
ORsouthrivertechtitan_ftp_serverMatch5.11.331
ORsouthrivertechtitan_ftp_serverMatch5.12.332
ORsouthrivertechtitan_ftp_serverMatch5.12.333
ORsouthrivertechtitan_ftp_serverMatch5.12.334
ORsouthrivertechtitan_ftp_serverMatch5.12.335
ORsouthrivertechtitan_ftp_serverMatch5.12.336
ORsouthrivertechtitan_ftp_serverMatch5.20.342
ORsouthrivertechtitan_ftp_serverMatch5.21.347
ORsouthrivertechtitan_ftp_serverMatch5.22.350
ORsouthrivertechtitan_ftp_serverMatch5.23.351
ORsouthrivertechtitan_ftp_serverMatch5.24.352
ORsouthrivertechtitan_ftp_serverMatch5.25.356
ORsouthrivertechtitan_ftp_serverMatch5.26.361
ORsouthrivertechtitan_ftp_serverMatch5.27.362
ORsouthrivertechtitan_ftp_serverMatch5.30.367
ORsouthrivertechtitan_ftp_serverMatch5.31.373
ORsouthrivertechtitan_ftp_serverMatch5.32.376
ORsouthrivertechtitan_ftp_serverMatch5.33.380
ORsouthrivertechtitan_ftp_serverMatch5.33.381
ORsouthrivertechtitan_ftp_serverMatch5.35.385
ORsouthrivertechtitan_ftp_serverMatch5.36.386
ORsouthrivertechtitan_ftp_serverMatch5.37.387
ORsouthrivertechtitan_ftp_serverMatch5.38.388
ORsouthrivertechtitan_ftp_serverMatch5.39.389
ORsouthrivertechtitan_ftp_serverMatch6.00.492
ORsouthrivertechtitan_ftp_serverMatch6.01.512
ORsouthrivertechtitan_ftp_serverMatch6.03.537
ORsouthrivertechtitan_ftp_serverMatch6.04.545
ORsouthrivertechtitan_ftp_serverMatch6.05.550
ORsouthrivertechtitan_ftp_serverMatch6.06.555
ORsouthrivertechtitan_ftp_serverMatch6.10.560
ORsouthrivertechtitan_ftp_serverMatch6.20.587
ORsouthrivertechtitan_ftp_serverMatch6.21.596
ORsouthrivertechtitan_ftp_serverMatch6.23.616
ORsouthrivertechtitan_ftp_serverMatch6.24.621
ORsouthrivertechtitan_ftp_serverMatch6.25.622
ORsouthrivertechtitan_ftp_serverMatch6.26.630
ORsouthrivertechtitan_ftp_serverMatch7.00
ORsouthrivertechtitan_ftp_serverMatch7.01
ORsouthrivertechtitan_ftp_serverMatch7.02
ORsouthrivertechtitan_ftp_serverMatch7.10
ORsouthrivertechtitan_ftp_serverMatch7.12
ORsouthrivertechtitan_ftp_serverMatch8.00
ORsouthrivertechtitan_ftp_serverMatch8.01
ORsouthrivertechtitan_ftp_serverMatch8.10
Related
cvelist
cvelist
CVE-2010-2426
2010-06-23 17:13:00
prion
prion
Directory traversal
2010-06-24 12:17:00
nvd
nvd
CVE-2010-2426
2010-06-24 12:17:45
openvas
openvas
Titan FTP Server 'XCRC' and 'COMB' Directory Traversal Vulnerabilities
2010-07-02 00:00:00
Titan FTP Server < 8.30.1231 Directory Traversal Vulnerabilities
2010-07-02 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.072 Low
EPSS
Percentile
94.1%
Related for CVE-2010-2426