CVE-2008-2889 Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a...
MediumCVSS 6.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wise-ftp | = 4.1.0 | No fix listed |
| wise-ftp | = 5.5.8 | No fix listed |
References
- 30663 third-party-advisory vendor-advisory
- 30788 third-party-advisory vendor-advisory
- vuln.sg
- 29844 vdb-entry
- ADV-2008-1898 vdb-entry
- www.wise-ftp.com patch