Lucene search

K
jvnJapan Vulnerability NotesJVN:94002296
HistoryDec 09, 2011 - 12:00 a.m.

JVN#94002296: FFFTP may insecurely load executable files

2011-12-0900:00:00
Japan Vulnerability Notes
jvn.jp
18

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

35.8%

FFFTP contains an issue when loading files, which may insecurely load executables or other files.
This vulnerability is different from JVN#62336482.

Impact

An attacker may execute arbitrary code with the privilege of the running application.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • FFFTP Version 1.98c and earlier

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

35.8%

Related for JVN:94002296