VulnerabilityModified
CVE-2014-1442
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.
MEDIUM 4.0EPSS 2.37%
Does this matter?
Lower severity and a low EPSS score (2.37%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 2.37% probability · 83th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- coreftp/core ftp
- Source
- cve@mitre.org
References
- http://coreftp.com/forums/viewtopic.php?t=2985707Vendor Advisory
- http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.htmlExploit
- http://seclists.org/fulldisclosure/2014/Feb/39Exploit
- http://secunia.com/advisories/56850Vendor Advisory
- http://www.osvdb.org/102967
- http://coreftp.com/forums/viewtopic.php?t=2985707Vendor Advisory
- http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.htmlExploit
- http://seclists.org/fulldisclosure/2014/Feb/39Exploit
- http://secunia.com/advisories/56850Vendor Advisory
- http://www.osvdb.org/102967
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.