PT-2011-5052 · Zftp · Zftpserver Suite

Publicado

2011-12-20

·

Atualizado

2011-12-20

·

CVE-2011-4717

CVSS v2.0

5.5

Média

VetorAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions zFTPServer Suite version 6.0.0.52
Description A directory traversal issue allows remote authenticated users to delete arbitrary directories by sending a crafted RMD command.
Recommendations For version 6.0.0.52, update to a version that fixes this issue to prevent remote authenticated users from deleting arbitrary directories.

Exploit

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-4717

Produtos afetados

Zftpserver Suite