high8.1Public exploit code
CVE-2009-4194
Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Golden FTP Server 4.30 - File Deletion2009-12-01 · remote · windows · Verified
Impact
Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delete arbitrary files via a .. (dot dot) in the DELE command. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kmint21 | Golden Ftp Server | Versions 4.30, 4.50 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.sat0ri.com/?p=292
- http://secunia.com/advisories/37527
- http://www.exploit-db.com/exploits/10258
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54497
- http://blog.sat0ri.com/?p=292
- http://secunia.com/advisories/37527
- http://www.exploit-db.com/exploits/10258
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54497