Lucene search

[email protected]NVD:CVE-2010-4154

HistoryNov 03, 2010 - 8:00 p.m.

CVE-2010-4154

2010-11-0320:00:04

CWE-22

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "…" (dot dot backslash) in a filename.

Affected configurations

NVD

Node

rhinosoftftp_voyagerRange≤15.2.0.11

rhinosoftftp_voyagerMatch15.0.0.0

rhinosoftftp_voyagerMatch15.0.0.1

rhinosoftftp_voyagerMatch15.0.0.2

rhinosoftftp_voyagerMatch15.0.0.3

rhinosoftftp_voyagerMatch15.1.0.0

rhinosoftftp_voyagerMatch15.1.0.1

rhinosoftftp_voyagerMatch15.1.0.2

rhinosoftftp_voyagerMatch15.1.0.3

rhinosoftftp_voyagerMatch15.1.0.4

rhinosoftftp_voyagerMatch15.2.0.0

rhinosoftftp_voyagerMatch15.2.0.2

rhinosoftftp_voyagerMatch15.2.0.4

rhinosoftftp_voyagerMatch15.2.0.6

rhinosoftftp_voyagerMatch15.2.0.8

rhinosoftftp_voyagerMatch15.2.0.9

References

marc.info/?l=bugtraq&m=128654931101920&w=2

packetstormsecurity.org/1010-exploits/ftpvoyager-traversal.txt

secunia.com/advisories/41719

www.htbridge.ch/advisory/directory_traversal_vulnerability_in_ftp_voyager.html

www.osvdb.org/68607

www.securityfocus.com/bid/43869

exchange.xforce.ibmcloud.com/vulnerabilities/62392

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

Related for NVD:CVE-2010-4154

cve1 kaspersky1 openvas2 cvelist1 prion1 htbridge1