PT-2010-4548 · 3D Ftp · 3D-Ftp Client
Published
2010-08-20
·
Updated
2010-08-23
·
CVE-2010-3102
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
3D-FTP Client versions 9.0 build 2 and earlier
Description
A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." (dot dot backslash) in a filename.
Recommendations
For versions 9.0 build 2 and earlier, update to a version that fixes this issue to prevent remote FTP servers from writing arbitrary files.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
3D-Ftp Client