high7.8Public exploit code
CVE-2015-7602
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BisonWare BisonFTP Server 3.5 - Directory Traversal2015-09-28 · remote · windows
Impact
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bisonware | Bisonftp | Version 3.5 |