CVE-2010-4154 Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." (dot dot backslash) in a filename.
HighCVSS 9.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a ".." (dot dot backslash) in a filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rhinosoft ftp voyager | <= 15.2.0.11 | No fix listed |
| rhinosoft ftp voyager | = 15.0.0.0 | No fix listed |
| rhinosoft ftp voyager | = 15.0.0.1 | No fix listed |
| rhinosoft ftp voyager | = 15.0.0.2 | No fix listed |
| rhinosoft ftp voyager | = 15.0.0.3 | No fix listed |
| rhinosoft ftp voyager | = 15.1.0.0 | No fix listed |
| rhinosoft ftp voyager | = 15.1.0.1 | No fix listed |
| rhinosoft ftp voyager | = 15.1.0.2 | No fix listed |
| rhinosoft ftp voyager | = 15.1.0.3 | No fix listed |
| rhinosoft ftp voyager | = 15.1.0.4 | No fix listed |
| rhinosoft ftp voyager | = 15.2.0.0 | No fix listed |
| rhinosoft ftp voyager | = 15.2.0.2 | No fix listed |
| rhinosoft ftp voyager | = 15.2.0.4 | No fix listed |
| rhinosoft ftp voyager | = 15.2.0.6 | No fix listed |
| rhinosoft ftp voyager | = 15.2.0.8 | No fix listed |
| rhinosoft ftp voyager | = 15.2.0.9 | No fix listed |
References
- 20101008 Directory Traversal Vulnerability in FTP Voyager mailing-list
- packetstormsecurity.org
- 41719 third-party-advisory vendor-advisory
- www.htbridge.ch
- 68607 vdb-entry
- 43869 vdb-entry
- ftpvoyager-unspecified-dir-traversal(62392) vdb-entry