medium5.0Public exploit code
CVE-2006-0319
Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot do…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Farmers WIFE 4.4 sp1 - 'FTP' Remote System Access2006-01-14 · remote · windows · Verified
Impact
Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Farmers Wife | Farmers Wife | Version 4.4_sp1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=113717162320654&w=2
- http://secunia.com/advisories/18508
- http://www.lort.dk/DSR-farmerswife44sp1.pl
- http://www.osvdb.org/22496
- http://www.securityfocus.com/bid/16321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24190
- http://marc.info/?l=full-disclosure&m=113717162320654&w=2
- http://secunia.com/advisories/18508
- http://www.lort.dk/DSR-farmerswife44sp1.pl
- http://www.osvdb.org/22496
- http://www.securityfocus.com/bid/16321
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24190