PT-2010-4545 · Smartftp · Smartftp Client

Publicado 2010-08-20 · Atualizado 2010-08-23 · CVE-2010-3099

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SmartFTP Client versions 4.0.1124.0 through 4.0 Build 1133

Description A directory traversal issue allows remote FTP servers to overwrite arbitrary files by including a ".." (dot dot backslash) in a filename.

Recommendations For versions 4.0.1124.0 through 4.0 Build 1133, update to a version after 4.0 Build 1133 to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-3099

Produtos afetados

Smartftp Client

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-3099 · Nota de Segurança
• http://secunia.com/advisories/40899 · Aviso do Fabricante
• http://smartftp.com/forums/index.php?/topic/16425-smartftp-client-40-change-log · Nota
• http://htbridge.ch/advisory/directory_traversal_in_smartftp.html · Nota