Lucene search

K
nvd[email protected]NVD:CVE-2010-4149
HistoryNov 02, 2010 - 2:26 a.m.

CVE-2010-4149

2010-11-0202:26:23
CWE-22
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "…" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
freshwebmasterfresh_ftpRange5.37
OR
freshwebmasterfresh_ftpMatch5.36

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

Related for NVD:CVE-2010-4149