PT-2009-6234 · Wing Ftp · Home Ftp Server

CVE-2009-4053 · Publicado 2009-11-23 · Atualizado 2024-01-26

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Home FTP Server version 1.10.1.139

Description Multiple directory traversal vulnerabilities allow remote authenticated users to create arbitrary directories via directory traversal sequences in an MKD command or create files with any contents in arbitrary directories via directory traversal sequences in a file upload request.

Recommendations For Home FTP Server version 1.10.1.139, consider restricting access to the MKD command and file upload requests to minimize the risk of exploitation. As a temporary workaround, limit the ability to create directories and upload files to authorized users only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-4053

Produtos afetados

Home Ftp Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/10162 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4053 · Nota de Segurança
• http://secunia.com/advisories/37381 · Aviso do Fabricante
• https://t.me/cvenotify/68909 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54303 · Nota