Directory traversal

2015-02-0611:59:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.495 Medium

EPSS

Percentile

97.5%

JSON

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.

CPENameOperatorVersion
reflection_ftp_clientle14.1.420

CPE	Name	Operator	Version
	reflection_ftp_client	le	14.1.420

References

support.attachmate.com/techdocs/2501.html

www.zerodayinitiative.com/advisories/ZDI-14-289/