Vulnerability Details CVE-2010-3096
Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via "..\" (dot dot backslash) sequences in a filename.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.3%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/40973
- http://www.htbridge.ch/advisory/directory_traversal_in_softx_ftp_client.html
- http://www.securityfocus.com/archive/1/513085/100/0/threaded
- http://secunia.com/advisories/40973
- http://www.htbridge.ch/advisory/directory_traversal_in_softx_ftp_client.html
- http://www.securityfocus.com/archive/1/513085/100/0/threaded
Products affected by CVE-2010-3096
-
cpe:2.3:a:softx:ftp_client:3.3