Lucene search
HistoryOct 26, 2010 - 8:00 p.m.
CVE-2010-4095
cve-2010-4095
directory traversal
ftp client
security vulnerability
serengeti systems incorporated
robo-ftp
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.6%
Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a … (dot dot) in a filename in a server response.
Affected configurations
Node
robo-ftprobo-ftpMatch3.7.3
ORrobo-ftprobo-ftpMatch3.7.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| robo-ftp:robo-ftp | robo-ftp | eq | 3.7.3 |
| robo-ftp:robo-ftp | robo-ftp | eq | 3.7.4 |
Related
cvelist
cvelist
CVE-2010-4095
2010-10-26 19:00:00
nvd
nvd
CVE-2010-4095
2010-10-26 20:00:01
openvas
openvas
Robo-FTP Directory Traversal Vulnerability
2010-11-16 00:00:00
Robo-FTP Directory Traversal Vulnerability
2010-11-16 00:00:00
htbridge
htbridge
Directory Traversal Vulnerability in Robo-FTP
2010-09-27 00:00:00
prion
prion
Directory traversal
2010-10-26 20:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.6%
Related for CVE-2010-4095