medium6.8Public exploit code
CVE-2008-2889
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a .…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WISE-FTP 4.1/5.5.8 - FTP Client 'LIST' Directory Traversal2008-06-20 · remote · multiple · Verified
Impact
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wise-Ftp | Wise-Ftp | Versions 4.1.0, 5.5.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30663
- http://secunia.com/advisories/30788
- http://vuln.sg/wiseftp558-en.html
- http://www.securityfocus.com/bid/29844
- http://www.vupen.com/english/advisories/2008/1898/references
- http://www.wise-ftp.com/news/index.htm
- http://secunia.com/advisories/30663
- http://secunia.com/advisories/30788
- http://vuln.sg/wiseftp558-en.html
- http://www.securityfocus.com/bid/29844
- http://www.vupen.com/english/advisories/2008/1898/references
- http://www.wise-ftp.com/news/index.htm