CVE-2009-4194

Summary

Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delete arbitrary files via a .. (dot dot) in the DELE command. NOTE: some of these details are obtained from third party information.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/37527
• http://www.exploit-db.com/exploits/10258
• http://blog.sat0ri.com/?p=292
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54497

References

• http://secunia.com/advisories/37527
• http://www.exploit-db.com/exploits/10258
• http://blog.sat0ri.com/?p=292
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54497

• ←Previous
• Next→