CVE-2015-7601

2015-09-2919:59:09

CWE-22

mitre

web.nvd.nist.gov

cve-2015-7601

nvd

pcman's ftp server

vulnerability

remote attackers

arbitrary file access

retr command

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.613

Percentile

97.8%

JSON

Directory traversal vulnerability in PCMan’s FTP Server 2.0.7 allows remote attackers to read arbitrary files via a …// (dot dot double slash) in a RETR command.

Affected configurations

Nvd

Node

pcman\'s_ftp_server_projectpcman\'s_ftp_serverMatch2.0.7

VendorProductVersionCPE
pcman\'s_ftp_server_projectpcman\'s_ftp_server2.0.7cpe:2.3:a:pcman\'s_ftp_server_project:pcman\'s_ftp_server:2.0.7:*:*:*:*:*:*:*