CVE-2010-3097 Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a ".." (dot dot backslash) in a filename.
HighCVSS 9.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a ".." (dot dot backslash) in a filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winfrigate frigate 3 | <= 3.36 | No fix listed |
| winfrigate frigate 3 | = 3.17 | No fix listed |
| winfrigate frigate 3 | = 3.18 | No fix listed |
| winfrigate frigate 3 | = 3.19 | No fix listed |
| winfrigate frigate 3 | = 3.20 | No fix listed |
| winfrigate frigate 3 | = 3.21 | No fix listed |
| winfrigate frigate 3 | = 3.22 | No fix listed |
| winfrigate frigate 3 | = 3.23 | No fix listed |
| winfrigate frigate 3 | = 3.24 | No fix listed |
| winfrigate frigate 3 | = 3.25 | No fix listed |
| winfrigate frigate 3 | = 3.26 | No fix listed |
| winfrigate frigate 3 | = 3.27 | No fix listed |
| winfrigate frigate 3 | = 3.28 | No fix listed |
| winfrigate frigate 3 | = 3.29 | No fix listed |
| winfrigate frigate 3 | = 3.30 | No fix listed |
| winfrigate frigate 3 | = 3.31 | No fix listed |
| winfrigate frigate 3 | = 3.32 | No fix listed |
| winfrigate frigate 3 | = 3.33 | No fix listed |
| winfrigate frigate 3 | = 3.34 | No fix listed |
| winfrigate frigate 3 | = 3.35 | No fix listed |
References
- 40898 third-party-advisory vendor-advisory
- www.htbridge.ch