medium5.0Public exploit code
CVE-2014-1841
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home fol…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Titan FTP Server 10.32 Build 1816 - Directory Traversal2014-02-11 · webapps · windows
Impact
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Southrivertech | Titan Ftp Server | through 10.40 Versions 10.0.1733, 10.01.1740, 10.30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
- http://www.exploit-db.com/exploits/31579
- http://www.osvdb.org/103195
- http://www.securityfocus.com/bid/65462
- http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
- http://www.exploit-db.com/exploits/31579
- http://www.osvdb.org/103195
- http://www.securityfocus.com/bid/65462