medium5.0Public exploit code
CVE-2008-1221
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.74…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microworld eScan Server 9.0.742 - Directory Traversal2008-03-06 · remote · windows · Verified
Impact
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microworld Technologies | Escan | Version 9.0.742.98 |
| Microworld Technologies | Escan Management Console | Version 9.0.742.1 |
| Microworld Technologies | Escan Server | Version 9.0.742.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/escaz-adv.txt
- http://secunia.com/advisories/29246
- http://securityreason.com/securityalert/3723
- http://www.securityfocus.com/archive/1/489228/100/0/threaded
- http://www.securityfocus.com/bid/28127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41033
- http://aluigi.altervista.org/adv/escaz-adv.txt
- http://secunia.com/advisories/29246
- http://securityreason.com/securityalert/3723
- http://www.securityfocus.com/archive/1/489228/100/0/threaded
- http://www.securityfocus.com/bid/28127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41033