CVE-2008-5175 Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to...
HighCVSS 9.3
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visicommedia aceftp | = 3.80.3-_nil_ | No fix listed |
References
- 30792 third-party-advisory vendor-advisory
- vuln.sg exploit
- 29989 vdb-entry
- ADV-2008-1954 vdb-entry
- aceftp-list-directory-traversal(43400) vdb-entry