CVE-2008-1564 Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." (dot dot backslash) in the filename.
MediumCVSS 4.3
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." (dot dot backslash) in the filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| file-transfer file transfer | = 1.2b | No fix listed |
| file-transfer file transfer | = 1.2c | No fix listed |
| file-transfer file transfer | = 1.2d | No fix listed |
| file-transfer file transfer | = 1.2e | No fix listed |
References
- 29540 third-party-advisory vendor-advisory
- sourceforge.net
- sourceforge.net
- 28453 exploit patch vdb-entry
- filetransfer-file-directory-traversal(41489) vdb-entry