CVE-2006-6950 Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. (dot dot) in a filename argument.
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. (dot dot) in a filename argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| conti ftpserver | = 1.0_build_2.8 | No fix listed |
References
- 23030 third-party-advisory vendor-advisory
- secwatch.org vendor-advisory
- 21174 vdb-entry vendor-advisory
- ADV-2006-4605 vdb-entry
- conti-ftpserver-directory-traversal(30411) vdb-entry