CVE-2014-3910 Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named file that lacks a filename extension.
MediumCVSS 4.4
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Emurasoft EmFTP allows local users to gain privileges via a Trojan horse executable file that is launched during an attempt to read a similarly named file that lacks a filename extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emurasoft emftp | All versions | No fix listed |
References
- jvn.jp
- JVN#50367052 third-party-advisory vendor-advisory
- JVNDB-2014-000103 third-party-advisory