Skip to content

CVE-2011-4266 Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as...

HighCVSS 9.3 EPSS 1.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.

Affected products

ProductAffected versionsFixed in
ffftp <= 1.98 No fix listed
ffftp = 1.79a No fix listed
ffftp = 1.80 No fix listed
ffftp = 1.81 No fix listed
ffftp = 1.82 No fix listed
ffftp = 1.83 No fix listed
ffftp = 1.84 No fix listed
ffftp = 1.85 No fix listed
ffftp = 1.86 No fix listed
ffftp = 1.86a No fix listed
ffftp = 1.87 No fix listed
ffftp = 1.87a No fix listed
ffftp = 1.88 No fix listed
ffftp = 1.88a No fix listed
ffftp = 1.88b No fix listed
ffftp = 1.89 No fix listed
ffftp = 1.89a No fix listed
ffftp = 1.89b No fix listed
ffftp = 1.90 No fix listed
ffftp = 1.91 No fix listed
ffftp = 1.92 No fix listed
ffftp = 1.92a No fix listed
ffftp = 1.92b No fix listed
ffftp = 1.92c No fix listed
ffftp = 1.93 No fix listed
Show 14 more
ProductAffected versionsFixed in
ffftp = 1.94 No fix listed
ffftp = 1.94a No fix listed
ffftp = 1.95 No fix listed
ffftp = 1.96 No fix listed
ffftp = 1.96a No fix listed
ffftp = 1.96b No fix listed
ffftp = 1.96c No fix listed
ffftp = 1.96d No fix listed
ffftp = 1.97 No fix listed
ffftp = 1.97a No fix listed
ffftp = 1.97b No fix listed
ffftp = 1.98 No fix listed
ffftp = 1.98-a No fix listed
ffftp = 1.98-b No fix listed

References