Skip to content

CVE-2010-4153 Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a ".." (dot dot backslash) in a filename.

HighCVSS 9.3 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a ".." (dot dot backslash) in a filename.

Affected products

ProductAffected versionsFixed in
crossftp pro <= 1.65a No fix listed
crossftp pro = 1.14 No fix listed
crossftp pro = 1.15 No fix listed
crossftp pro = 1.16 No fix listed
crossftp pro = 1.17 No fix listed
crossftp pro = 1.18 No fix listed
crossftp pro = 1.19 No fix listed
crossftp pro = 1.20 No fix listed
crossftp pro = 1.21 No fix listed
crossftp pro = 1.22 No fix listed
crossftp pro = 1.23 No fix listed
crossftp pro = 1.24 No fix listed
crossftp pro = 1.25 No fix listed
crossftp pro = 1.26 No fix listed
crossftp pro = 1.27 No fix listed
crossftp pro = 1.28 No fix listed
crossftp pro = 1.29 No fix listed
crossftp pro = 1.30 No fix listed
crossftp pro = 1.31 No fix listed
crossftp pro = 1.32 No fix listed
crossftp pro = 1.33 No fix listed
crossftp pro = 1.34 No fix listed
crossftp pro = 1.35 No fix listed
crossftp pro = 1.36 No fix listed
crossftp pro = 1.37 No fix listed
Show 9 more
ProductAffected versionsFixed in
crossftp pro = 1.38 No fix listed
crossftp pro = 1.39 No fix listed
crossftp pro = 1.40 No fix listed
crossftp pro = 1.41 No fix listed
crossftp pro = 1.42 No fix listed
crossftp pro = 1.50 No fix listed
crossftp pro = 1.51 No fix listed
crossftp pro = 1.52 No fix listed
crossftp pro = 1.53 No fix listed

References