CVE-2005-1480

Опубликовано: 11 мая 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in the urlget site command.

Ссылки

http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685
http://marc.info/?l=bugtraq&m=111507556127582&w=2
http://secunia.com/advisories/15037
Patch
http://www.osvdb.org/15713
http://www.securityfocus.com/bid/13292
https://exchange.xforce.ibmcloud.com/vulnerabilities/20368
http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685
http://marc.info/?l=bugtraq&m=111507556127582&w=2
http://secunia.com/advisories/15037
Patch
http://www.osvdb.org/15713
http://www.securityfocus.com/bid/13292
https://exchange.xforce.ibmcloud.com/vulnerabilities/20368

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:raiden_professional_servers:raidenftpd:*:*:*:*:*:*:*:*

Версия до 2.4.2240 (включая)

EPSS

Процентиль: 88%

0.03701

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8g6g-hrhw-vq74

github

больше 4 лет назад

Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\\" (dot dot backslash) in the urlget site command.