2 matches found
CVE-2010-3102
The CVE-2010-3102 entry concerns SiteDesigner Technologies, Inc. 3D-FTP Client (9.0 build 2 and earlier). A directory traversal flaw in filenames using ".." allows remote FTP servers to write arbitrary files on the affected host. OpenVAS entries corroborate a directory traversal vulnerability. So...
CVE-2008-2822
The CVE-2008-2822 issue affects the 3D-FTP Client (version around 8.01/8.0 build 1). The vulnerability is a directory-traversal flaw triggered by a ".." in responses to LIST/MLSD, allowing remote FTP servers to create or overwrite arbitrary files outside the client directory. Attack impact includ...