CVE-2010-4095

2010-10-2620:00:01

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.6%

JSON

Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a … (dot dot) in a filename in a server response.

Affected configurations

Nvd

Node

robo-ftprobo-ftpMatch3.7.3

robo-ftprobo-ftpMatch3.7.4

VendorProductVersionCPE
robo-ftprobo-ftp3.7.3cpe:2.3:a:robo-ftp:robo-ftp:3.7.3:*:*:*:*:*:*:*
robo-ftprobo-ftp3.7.4cpe:2.3:a:robo-ftp:robo-ftp:3.7.4:*:*:*:*:*:*:*