Lucene search

K
kasperskyKaspersky LabKLA10154
HistoryNov 03, 2010 - 12:00 a.m.

KLA10154 WLF vulnerability in FTP Voyager

2010-11-0300:00:00
Kaspersky Lab
threats.kaspersky.com
13

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename.

Original advisories

test results

Related products

FTP-Voyager

CVE list

CVE-2010-4154 critical

Solution

Update to latest version

Impacts

  • WLF

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.

Affected Products

  • FTP Voyager versions 15.2.0.11 and earlier.

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%