Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.02126
Percentile: 0.83415

CVSS Scoring

Affected Products

• cpe:2.3:a:ncftp_software:ncftp:3.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.1.0:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:ncftp_software:ncftp:3.1.4:*:*:*:*:*:*:*
• cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
• cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
• cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*
• cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*

← Back to Home