VulnerabilityModified
CVE-2008-2519
Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via ..
MEDIUM 6.8EPSS 2.35%
Does this matter?
Lower severity and a low EPSS score (2.35%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via .. (dot dot) sequences in responses to LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.35% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- core ftp/core ftp
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/30389Vendor Advisory
- http://vuln.sg/coreftp211565-en.htmlExploit
- http://www.coreftp.com/forums/viewtopic.php?t=6078Patch
- http://www.securityfocus.com/bid/29362
- http://www.vupen.com/english/advisories/2008/1643/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42605
- http://secunia.com/advisories/30389Vendor Advisory
- http://vuln.sg/coreftp211565-en.htmlExploit
- http://www.coreftp.com/forums/viewtopic.php?t=6078Patch
- http://www.securityfocus.com/bid/29362
- http://www.vupen.com/english/advisories/2008/1643/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42605
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.