medium6.4Public exploit code
CVE-2004-2184
Directory traversal vulnerability in Digicraft Yak!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yak! Chat Client 2.x - FTP Server Directory Traversal2004-10-15 · dos · windows · Verified
Impact
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or "..\" sequences in commands such as (1) dir or (2) put.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digicraft Software | Yak | Versions 2.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1, 2.1.2 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/yak-adv.txt
- http://marc.info/?l=full-disclosure&m=109788315103778&w=2
- http://secunia.com/advisories/12849
- http://securitytracker.com/id?1011708
- http://www.osvdb.org/10763
- http://www.securityfocus.com/archive/1/378533
- http://www.securityfocus.com/bid/11433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17740
- http://aluigi.altervista.org/adv/yak-adv.txt
- http://marc.info/?l=full-disclosure&m=109788315103778&w=2
- http://secunia.com/advisories/12849
- http://securitytracker.com/id?1011708
- http://www.osvdb.org/10763
- http://www.securityfocus.com/archive/1/378533
- http://www.securityfocus.com/bid/11433
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17740