6.5

CVE-2010-2425

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Southrivertech ≫ Titan Ftp Server Version <= 8.10.1125
Southrivertech ≫ Titan Ftp Server Version 1.0.17
Southrivertech ≫ Titan Ftp Server Version 1.0.18
Southrivertech ≫ Titan Ftp Server Version 1.0.19
Southrivertech ≫ Titan Ftp Server Version 1.0.20
Southrivertech ≫ Titan Ftp Server Version 1.0.21
Southrivertech ≫ Titan Ftp Server Version 1.0.22
Southrivertech ≫ Titan Ftp Server Version 1.0.23
Southrivertech ≫ Titan Ftp Server Version 1.0.24
Southrivertech ≫ Titan Ftp Server Version 1.0.25
Southrivertech ≫ Titan Ftp Server Version 1.0.26
Southrivertech ≫ Titan Ftp Server Version 1.0.27
Southrivertech ≫ Titan Ftp Server Version 1.0.28
Southrivertech ≫ Titan Ftp Server Version 1.0.29
Southrivertech ≫ Titan Ftp Server Version 1.0.30
Southrivertech ≫ Titan Ftp Server Version 1.0.31
Southrivertech ≫ Titan Ftp Server Version 1.1.33
Southrivertech ≫ Titan Ftp Server Version 1.11.34
Southrivertech ≫ Titan Ftp Server Version 2.0.44 Update beta
Southrivertech ≫ Titan Ftp Server Version 2.00.95
Southrivertech ≫ Titan Ftp Server Version 2.01.96
Southrivertech ≫ Titan Ftp Server Version 2.02.99
Southrivertech ≫ Titan Ftp Server Version 2.10.119
Southrivertech ≫ Titan Ftp Server Version 2.10.120
Southrivertech ≫ Titan Ftp Server Version 2.10.121
Southrivertech ≫ Titan Ftp Server Version 2.11.132
Southrivertech ≫ Titan Ftp Server Version 2.20.140
Southrivertech ≫ Titan Ftp Server Version 2.21.142
Southrivertech ≫ Titan Ftp Server Version 2.30.151
Southrivertech ≫ Titan Ftp Server Version 2.31.152
Southrivertech ≫ Titan Ftp Server Version 2.40.155
Southrivertech ≫ Titan Ftp Server Version 3.00.162
Southrivertech ≫ Titan Ftp Server Version 3.01.163
Southrivertech ≫ Titan Ftp Server Version 3.02.165
Southrivertech ≫ Titan Ftp Server Version 3.10.169
Southrivertech ≫ Titan Ftp Server Version 3.12.172
Southrivertech ≫ Titan Ftp Server Version 3.20.175
Southrivertech ≫ Titan Ftp Server Version 3.21.177
Southrivertech ≫ Titan Ftp Server Version 3.22.178
Southrivertech ≫ Titan Ftp Server Version 3.30.186
Southrivertech ≫ Titan Ftp Server Version 4.00.245
Southrivertech ≫ Titan Ftp Server Version 4.01.246
Southrivertech ≫ Titan Ftp Server Version 4.02.248
Southrivertech ≫ Titan Ftp Server Version 4.03.249
Southrivertech ≫ Titan Ftp Server Version 4.05.252
Southrivertech ≫ Titan Ftp Server Version 4.10.256
Southrivertech ≫ Titan Ftp Server Version 4.11.257
Southrivertech ≫ Titan Ftp Server Version 4.13.260
Southrivertech ≫ Titan Ftp Server Version 4.14.261
Southrivertech ≫ Titan Ftp Server Version 4.20.263
Southrivertech ≫ Titan Ftp Server Version 4.21.264
Southrivertech ≫ Titan Ftp Server Version 4.22.265
Southrivertech ≫ Titan Ftp Server Version 4.23.266
Southrivertech ≫ Titan Ftp Server Version 4.30.269
Southrivertech ≫ Titan Ftp Server Version 4.31.272
Southrivertech ≫ Titan Ftp Server Version 5.00.303
Southrivertech ≫ Titan Ftp Server Version 5.01.306
Southrivertech ≫ Titan Ftp Server Version 5.02.307
Southrivertech ≫ Titan Ftp Server Version 5.03.308
Southrivertech ≫ Titan Ftp Server Version 5.03.309
Southrivertech ≫ Titan Ftp Server Version 5.03.310
Southrivertech ≫ Titan Ftp Server Version 5.04.311
Southrivertech ≫ Titan Ftp Server Version 5.04.312
Southrivertech ≫ Titan Ftp Server Version 5.04.313
Southrivertech ≫ Titan Ftp Server Version 5.04.314
Southrivertech ≫ Titan Ftp Server Version 5.04.315
Southrivertech ≫ Titan Ftp Server Version 5.05.316
Southrivertech ≫ Titan Ftp Server Version 5.05.317
Southrivertech ≫ Titan Ftp Server Version 5.05.318
Southrivertech ≫ Titan Ftp Server Version 5.05.319
Southrivertech ≫ Titan Ftp Server Version 5.05.320
Southrivertech ≫ Titan Ftp Server Version 5.05.321
Southrivertech ≫ Titan Ftp Server Version 5.05.322
Southrivertech ≫ Titan Ftp Server Version 5.05.323
Southrivertech ≫ Titan Ftp Server Version 5.05.324
Southrivertech ≫ Titan Ftp Server Version 5.05.325
Southrivertech ≫ Titan Ftp Server Version 5.05.326
Southrivertech ≫ Titan Ftp Server Version 5.05.327
Southrivertech ≫ Titan Ftp Server Version 5.10.328
Southrivertech ≫ Titan Ftp Server Version 5.10.329
Southrivertech ≫ Titan Ftp Server Version 5.11.330
Southrivertech ≫ Titan Ftp Server Version 5.11.331
Southrivertech ≫ Titan Ftp Server Version 5.12.332
Southrivertech ≫ Titan Ftp Server Version 5.12.333
Southrivertech ≫ Titan Ftp Server Version 5.12.334
Southrivertech ≫ Titan Ftp Server Version 5.12.335
Southrivertech ≫ Titan Ftp Server Version 5.12.336
Southrivertech ≫ Titan Ftp Server Version 5.20.342
Southrivertech ≫ Titan Ftp Server Version 5.21.347
Southrivertech ≫ Titan Ftp Server Version 5.22.350
Southrivertech ≫ Titan Ftp Server Version 5.23.351
Southrivertech ≫ Titan Ftp Server Version 5.24.352
Southrivertech ≫ Titan Ftp Server Version 5.25.356
Southrivertech ≫ Titan Ftp Server Version 5.26.361
Southrivertech ≫ Titan Ftp Server Version 5.27.362
Southrivertech ≫ Titan Ftp Server Version 5.30.367
Southrivertech ≫ Titan Ftp Server Version 5.31.373
Southrivertech ≫ Titan Ftp Server Version 5.32.376
Southrivertech ≫ Titan Ftp Server Version 5.33.380
Southrivertech ≫ Titan Ftp Server Version 5.33.381
Southrivertech ≫ Titan Ftp Server Version 5.35.385
Southrivertech ≫ Titan Ftp Server Version 5.36.386
Southrivertech ≫ Titan Ftp Server Version 5.37.387
Southrivertech ≫ Titan Ftp Server Version 5.38.388
Southrivertech ≫ Titan Ftp Server Version 5.39.389
Southrivertech ≫ Titan Ftp Server Version 6.00.492
Southrivertech ≫ Titan Ftp Server Version 6.01.512
Southrivertech ≫ Titan Ftp Server Version 6.03.537
Southrivertech ≫ Titan Ftp Server Version 6.04.545
Southrivertech ≫ Titan Ftp Server Version 6.05.550
Southrivertech ≫ Titan Ftp Server Version 6.06.555
Southrivertech ≫ Titan Ftp Server Version 6.10.560
Southrivertech ≫ Titan Ftp Server Version 6.20.587
Southrivertech ≫ Titan Ftp Server Version 6.21.596
Southrivertech ≫ Titan Ftp Server Version 6.23.616
Southrivertech ≫ Titan Ftp Server Version 6.24.621
Southrivertech ≫ Titan Ftp Server Version 6.25.622
Southrivertech ≫ Titan Ftp Server Version 6.26.630
Southrivertech ≫ Titan Ftp Server Version 7.00
Southrivertech ≫ Titan Ftp Server Version 7.01
Southrivertech ≫ Titan Ftp Server Version 7.02
Southrivertech ≫ Titan Ftp Server Version 7.10
Southrivertech ≫ Titan Ftp Server Version 7.12
Southrivertech ≫ Titan Ftp Server Version 8.00
Southrivertech ≫ Titan Ftp Server Version 8.01
Southrivertech ≫ Titan Ftp Server Version 8.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.22% 0.646
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://secunia.com/advisories/40237
Vendor Advisory
http://www.osvdb.org/65622
http://www.securityfocus.com/archive/1/511873/100/0/threaded
http://www.securityfocus.com/bid/40949