CVE-2008-2822 Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a...
HighCVSS 9.3
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a (1) LIST or (2) MLSD command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3dftp 3d-ftp client | = 8.01 | No fix listed |
References
- 30651 third-party-advisory vendor-advisory
- vuln.sg exploit
- www.3dftp.com
- 29749 exploit vdb-entry
- ADV-2008-1853 vdb-entry
- 3dftp-list-mlsd-directory-traversal(43095) vdb-entry