CVE-2014-1843 Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properti...
MediumCVSS 5.0
EPSS 4.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| southrivertech titan ftp server | <= 10.40 | No fix listed |
| southrivertech titan ftp server | = 10.0.1733 | No fix listed |
| southrivertech titan ftp server | = 10.01.1740 | No fix listed |
| southrivertech titan ftp server | = 10.30 | No fix listed |
References
- 20140210 Titan FTP Server Directory Traversal Vulnerabilities - [CVE-2014-1841 / CVE-2014-1842 / CVE-2014-1843] mailing-list
- 31579 exploit
- 103197 vdb-entry
- 65469 vdb-entry