CVE-2011-4266

2011-12-1311:00:00

jpcert

www.cve.org

untrusted search path

ffftp

privilege escalation

trojan horse

executable file

extensionless file

vulnerability

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

48.4%

JSON

Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.