ID de Prueba:	1.3.6.1.4.1.25623.1.0.800533
Categoría:	FTP
Título:	FFFTP LIST Command Directory Traversal Vulnerability
Resumen:	FFFTP Client is prone to a directory traversal vulnerability.
Descripción:	Summary: FFFTP Client is prone to a directory traversal vulnerability. Vulnerability Insight: The flaw is due to input validation error when processing FTP responses to a LIST command with a filename and is followed by ../ (dot dot forward-slash). Vulnerability Impact: Successful exploitation will allow remote attackers to create or overwrite arbitrary files on a vulnerable system by tricking a user into downloading a directory containing files. Affected Software/OS: FFFTP version 1.96b and prior on Windows. Solution: Upgrade to version 1.96d or later. CVSS Score: 8.8 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-6424 BugTraq ID: 29459 http://www.securityfocus.com/bid/29459 http://vuln.sg/FFFTP196b-en.html http://osvdb.org/45894 http://secunia.com/advisories/30428 http://www.vupen.com/english/advisories/2008/1708/references XForce ISS Database: ffftp-list-directory-traversal(42796) https://exchange.xforce.ibmcloud.com/vulnerabilities/42796
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.