critical9.3Public exploit code
CVE-2008-2822
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal2008-06-16 · remote · multiple · Verified
Impact
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a (1) LIST or (2) MLSD command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3dftp | 3d-Ftp Client | Version 8.01 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30651
- http://vuln.sg/3dftp801-en.html
- http://www.3dftp.com/3dftp_versions.htm
- http://www.securityfocus.com/bid/29749
- http://www.vupen.com/english/advisories/2008/1853/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43095
- http://secunia.com/advisories/30651
- http://vuln.sg/3dftp801-en.html
- http://www.3dftp.com/3dftp_versions.htm
- http://www.securityfocus.com/bid/29749
- http://www.vupen.com/english/advisories/2008/1853/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43095