Lucene search

MitreCVE-2010-3098

HistoryAug 20, 2010 - 8:00 p.m.

CVE-2010-3098

2010-08-2020:00:03

CWE-22

mitre

web.nvd.nist.gov

cve

2010

3098

directory traversal

iorush software

ftp rush

vulnerability

remote ftp servers

file overwrite

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.002

Percentile

59.5%

JSON

Directory traversal vulnerability in IoRush Software FTP Rush 1.1.3 and possibly earlier allows remote FTP servers to overwrite arbitrary files via a "…" (dot dot backslash) in a filename.

Affected configurations

Nvd

Node

ftprushftprushMatch1.1.3

VendorProductVersionCPE
ftprushftprush1.1.3cpe:2.3:a:ftprush:ftprush:1.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ftprush	ftprush	1.1.3	cpe:2.3:a:ftprush:ftprush:1.1.3:::::::*

References

secunia.com/advisories/40900

www.htbridge.ch/advisory/directory_traversal_in_ftp_rush.html

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.002

Percentile

59.5%

JSON

Related for CVE-2010-3098