medium4.0
CVE-2014-1442
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a…
Impact
Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coreftp | Core Ftp | Version 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://coreftp.com/forums/viewtopic.php?t=2985707
- http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Feb/39
- http://secunia.com/advisories/56850
- http://www.osvdb.org/102967
- http://coreftp.com/forums/viewtopic.php?t=2985707
- http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Feb/39
- http://secunia.com/advisories/56850
- http://www.osvdb.org/102967