PT-2010-5321
CVE-2010-4149
·
تاريخ النشر
2010-11-01
·
تاريخ التحديث
2018-10-10
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
FreshWebMaster Fresh FTP versions 5.36 through 5.37
FreshWebMaster Fresh FTP versions prior to 5.36
Description
A directory traversal issue allows remote FTP servers to write arbitrary files by including a ".." (dot dot backslash) in a filename.
Recommendations
For FreshWebMaster Fresh FTP versions 5.36 and 5.37, consider restricting access to the FTP server until a fix is available.
For FreshWebMaster Fresh FTP versions prior to 5.36, consider updating to a version that is not affected by this issue, if available.
As a temporary workaround, consider disabling the ability for remote FTP servers to write files via the FTP server until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾