PT-2015-7568
CVE-2015-7602
·
Published
2015-09-29
·
Updated
2015-10-13
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
BisonWare BisonFTP version 3.5
Description
A directory traversal issue allows remote attackers to read arbitrary files by including a ../ (dot dot slash) in a RETR command.
Recommendations
For version 3.5, consider restricting access to the RETR command until a patch is available to prevent exploitation of this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾