Lucene search

K
nvd[email protected]NVD:CVE-2008-5175
HistoryNov 19, 2008 - 6:11 p.m.

CVE-2008-5175

2008-11-1918:11:50
CWE-22
web.nvd.nist.gov
6

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a … (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.

Affected configurations

NVD
Node
visicommediaaceftpMatch3.80.3_nil_freeware
OR
visicommediaaceftpMatch3.80.3_nil_pro

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%