NetSight
IP …
medium4.3Public exploit code

CVE-2008-1564

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in th…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in the filename.

Affected products

VendorProductAffected versions
File-TransferFile Transfer
Versions 1.2b, 1.2c, 1.2d, 1.2e

Weakness classification

CWE-22

References