SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-5949

Directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote attackers to create arbitrary directories via directory traversal sequences in a MKD request.

MEDIUM 5.0EPSS 1.69%

Does this matter?

Lower severity and a low EPSS score (1.69%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows remote attackers to create arbitrary directories via directory traversal sequences in a MKD request. NOTE: the provenance of this information is unknown; details are obtained from third party sources.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
1.69% probability · 76th percentile
CISA KEV
Not listed
Affected
altools/alftp ftp server
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.