medium5.0Public exploit code
CVE-2014-1843
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Titan FTP Server 10.32 Build 1816 - Directory Traversal2014-02-11 · webapps · windows
Impact
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Southrivertech | Titan Ftp Server | through 10.40 Versions 10.0.1733, 10.01.1740, 10.30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
- http://www.exploit-db.com/exploits/31579
- http://www.osvdb.org/103197
- http://www.securityfocus.com/bid/65469
- http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html
- http://www.exploit-db.com/exploits/31579
- http://www.osvdb.org/103197
- http://www.securityfocus.com/bid/65469