KLA10366 OSI vulnerability in Titan FTP Server

2014-04-2900:00:00

Kaspersky Lab

threats.kaspersky.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

JSON

A directory traversal vulnerability was found in Titan FTP Server. By exploiting this vulnerability malicious users can list usernames or home folder. This vulnerability can be exploited remotely via specially designed parameters.

Original advisories

Changelog

Exploitation

Public exploits exist for this vulnerability.

Related products

Titan-FTP-Server

CVE list

CVE-2014-1842 critical

CVE-2014-1843 critical

CVE-2014-1841 critical

Solution

Update to latest version

Impacts

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.