medium6.5
CVE-2010-2425
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticat…
Impact
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Southrivertech | Titan Ftp Server | through 8.10.1125 Versions 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/40237
- http://www.osvdb.org/65622
- http://www.securityfocus.com/archive/1/511873/100/0/threaded
- http://www.securityfocus.com/bid/40949
- http://secunia.com/advisories/40237
- http://www.osvdb.org/65622
- http://www.securityfocus.com/archive/1/511873/100/0/threaded
- http://www.securityfocus.com/bid/40949