CVEvulnerability

CVE-2008-1221

5.0 MEDIUM Published 2008-03-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-22

Description

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.

Affected configurations

• microworld technologies escan 9.0.742.98 • microworld technologies escan management console 9.0.742.1 • microworld technologies escan server 9.0.742.1

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References