CVE-2014-0830

The CVE-2014-0830 family affects IBM Financial Transaction Manager (FTM) 2.0 (before 2.0.0.3) and 2.1 (before 2.1.0.1) in the OAC component. The vulnerability is a directory traversal in the table-export function that allows an authenticated user to read arbitrary files by supplying a modified pa...

PT-2014-3874

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM versions 2.0 through 2.0.0.2 IBM Financial Transaction Manager FTM versions 2.1 through 2.1.0.0 Description The issue allows remote authenticated users to read arbitrary files via a modified pathname due t...

CVE-2014-0830: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...

CVE-2014-0833: Undefined Security Weakness

The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...

CVE-2002-0978

CVE-2002-0978 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to version 4.0. The vulnerability allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle (MITM) attack that can modify TGT and TGN parameters in a call to th...

CVE-2002-0977

CVE-2002-0977 affects the Microsoft File Transfer Manager (FTM) ActiveX control prior to 4.0. The vulnerability is a buffer overflow triggered by a long TS value, permitting remote code execution. According to NVD, the exploit vector is NETWORK with low complexity and no authentication required, ...

CVE-2002-0978: Undefined Security Weakness

Microsoft File Transfer Manager FTM ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the "Persist" function...