Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.3 views

SUSE CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS8.8AI score0.26672EPSS
Exploits3References4
Github Security Blog
Github Security Blog
added 2022/05/13 1:9 a.m.33 views

Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS5AI score0.26672EPSS
Exploits3References12Affected Software1
OSV
OSV
added 2022/05/13 1:9 a.m.1 views

GHSA-Q446-82VQ-W674 Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS7AI score0.26672EPSS
Exploits3References11
RedHat Linux
RedHat Linux
added 2017/11/02 8:8 p.m.1 views

jsch: ChannelSftp path traversal vulnerability

A vulnerability was discovered in JSch that allows a malicious sftp server to force a client-side relative path traversal in jsch's implementation for recursive sftp-get. An attacker could leverage this to write files outside the client's download basedir with effective permissions of the jsch sf...

5.9CVSS6.9AI score0.26672EPSS
Exploits3References5
UbuntuCve
UbuntuCve
added 2017/01/19 10:59 p.m.32 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.7AI score0.26672EPSS
Exploits3References3
Prion
Prion
added 2017/01/19 10:59 p.m.19 views

Directory traversal

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

4.3CVSS7AI score0.26672EPSS
Exploits3References11Affected Software1
OSV
OSV
added 2017/01/19 10:59 p.m.1 views

DEBIAN-CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.8AI score0.26672EPSS
Exploits3References1
Debian CVE
Debian CVE
added 2017/01/19 10:0 p.m.24 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.1AI score0.26672EPSS
Exploits3
Rows per page
Query Builder