Vulnerability Details CVE-2008-6424
Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.4%
CVSS Severity
CVSS v2 Score 8.8
References
- http://osvdb.org/45894
- http://secunia.com/advisories/30428
- http://vuln.sg/FFFTP196b-en.html
- http://www.securityfocus.com/bid/29459
- http://www.vupen.com/english/advisories/2008/1708/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42796
- http://osvdb.org/45894
- http://secunia.com/advisories/30428
- http://vuln.sg/FFFTP196b-en.html
- http://www.securityfocus.com/bid/29459
- http://www.vupen.com/english/advisories/2008/1708/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42796