PT-2012-1240

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.1.1 Description The issue is related to the ParameterInterceptor component, which does not properly restrict access to public constructors. This allows remote attackers to create or overwrite arbitrary files...

PT-2011-5106

Name of the Vulnerable Software and Affected Versions Serv-U FTP Server versions prior to 11.1.0.5 Description A directory traversal issue allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, by using a "..:/" dot dot colon forward slash ...

PT-2011-1738

Name of the Vulnerable Software and Affected Versions FilterFTP versions 2.0.3 through 2.0.5 FilterFTP versions prior to 2.0.3 Description The issue allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename. This is a directory traversal vulnerability...

PT-2010-5325

Name of the Vulnerable Software and Affected Versions CrossFTP Pro versions 1.65a and earlier Description A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." dot dot backslash in a filename. Recommendations For CrossFTP Pro versions 1.65a and earlier...

KLA10154 WLF vulnerability in FTP Voyager

Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename. Original advisories test results Exploitation Related products FTP-Voyager CVE li...

PT-2010-5326

Name of the Vulnerable Software and Affected Versions FTP Voyager versions 15.2.0.11 and earlier Description A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." dot dot backslash in a filename. Recommendations For versions 15.2.0.11 and earlier, upda...

PT-2010-5321

Name of the Vulnerable Software and Affected Versions FreshWebMaster Fresh FTP versions 5.36 through 5.37 FreshWebMaster Fresh FTP versions prior to 5.36 Description A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." dot dot backslash in a filename...

PT-2010-5290

Name of the Vulnerable Software and Affected Versions Robo-FTP versions 3.7.3 through 3.7.4 Description A directory traversal issue exists in the FTP client, allowing remote FTP servers to write arbitrary files by including a .. dot dot in a filename within a server response. Recommendations For...

Mandriva Update for php-pear-Mail MDVSA-2010:025 (php-pear-Mail)

Check for the Version of php-pear-Mail OpenVAS Vulnerability Test Mandriva Update for php-pear-Mail MDVSA-2010:025 php-pear-Mail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2008-1000: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 aka Leopard allows remote authenticated users to write arbitrary files via ".." sequences in file attachments...

CVE-2006-2100: Undefined Security Weakness

Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...

CVE-2005-2384: Undefined Security Weakness

Directory traversal vulnerability in a third-party compression library UNACEV2.DLL, as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with 1 .. or 2 absolute pathnames...

CVE-2005-1774: Undefined Security Weakness

WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...

CVE-2005-0845: Undefined Security Weakness

Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. dot dot in the attachid parameter...