JVN#62336482: FFFTP may insecurely load executable files

FFFTP loads certain executables when using certain functions. FFFTP contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privilege of the running application. Solution Update the software Update to the latest...

FFFTP LIST Command Directory Traversal Vulnerability

This host is installed with FFFTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbffftplistcmddirtraversalvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ FFFTP LIST Command Directory Traversal Vulnerability. Authors: Nikita MR Copyright: Copyright c 2009...

FFFTP Version Detection

This script detects the version of FFFTP client and saves the result in KB. OpenVAS Vulnerability Test $Id: gbffftpdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ FFFTP Version Detection Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is...

FFFTP Version Detection

This script detects the version of FFFTP client. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Directory traversal

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2008-6424

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2008-6424

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2008-6424

The CVE-2008-6424 entry corresponds to a directory traversal flaw in FFFTP 1.96b. An attacker-controlled FTP LIST response containing .. can cause the remote FTP server to create or overwrite arbitrary files on the affected system. The vulnerability arises from how LIST command results are handle...

CVE-2008-6424: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

FFFTP客户端目录遍历漏洞

FFFTP是一款小型的FTP客户端软件。 FFFTP客户端没有正确地验证FTP服务器所返回的LIST命令响应中包含有目录遍历序列（斜线）的文件名，如果用户受骗从恶意的FTP服务器下载的目录包含有带有恶意文件名的文件的话，就可能导致向用户系统的任意位置写入文件。 Jun Sota FFFTP 1.96b Jun Sota -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www2.biglobe.ne.jp/sota/ffftp-e.html LIST响应： -rw-r--r-- 1 502 502 4096 M...