Vulnerability Details CVE-2006-0319
Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.069
EPSS Ranking 90.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=full-disclosure&m=113717162320654&w=2
- http://secunia.com/advisories/18508
- http://www.lort.dk/DSR-farmerswife44sp1.pl
- http://www.osvdb.org/22496
- http://www.securityfocus.com/bid/16321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24190
- http://marc.info/?l=full-disclosure&m=113717162320654&w=2
- http://secunia.com/advisories/18508
- http://www.lort.dk/DSR-farmerswife44sp1.pl
- http://www.osvdb.org/22496
- http://www.securityfocus.com/bid/16321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24190
Products affected by CVE-2006-0319
-
cpe:2.3:a:farmers_wife:farmers_wife:4.4_sp1