CVE-2008-2795 Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) or a .....
MediumCVSS 4.3
EPSS 9.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) or a ..\ (dot dot backslash) in a response to a LIST command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| idm computer solutions inc ultraedit | = 14.00b | No fix listed |
References
- 30749 exploit third-party-advisory
- vuln.sg exploit
- 29784 exploit vdb-entry
- ADV-2008-1864 vdb-entry
- ultraedit-list-directory-traversal(43149) vdb-entry