CVEvulnerability
CVE-2010-2425
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.
Affected configurations
• southrivertech titan ftp server (<= 8.10.1125)
• southrivertech titan ftp server 1.0.17
• southrivertech titan ftp server 1.0.18
• southrivertech titan ftp server 1.0.19
• southrivertech titan ftp server 1.0.20
• southrivertech titan ftp server 1.0.21
• southrivertech titan ftp server 1.0.22
• southrivertech titan ftp server 1.0.23
• southrivertech titan ftp server 1.0.24
• southrivertech titan ftp server 1.0.25
• southrivertech titan ftp server 1.0.26
• southrivertech titan ftp server 1.0.27
• southrivertech titan ftp server 1.0.28
• southrivertech titan ftp server 1.0.29
• southrivertech titan ftp server 1.0.30
• southrivertech titan ftp server 1.0.31
• southrivertech titan ftp server 1.1.33
• southrivertech titan ftp server 1.11.34
• southrivertech titan ftp server 2.0.44
• southrivertech titan ftp server 2.00.95
• southrivertech titan ftp server 2.01.96
• southrivertech titan ftp server 2.02.99
• southrivertech titan ftp server 2.10.119
• southrivertech titan ftp server 2.10.120
• southrivertech titan ftp server 2.10.121
• southrivertech titan ftp server 2.11.132
• southrivertech titan ftp server 2.20.140
• southrivertech titan ftp server 2.21.142
• southrivertech titan ftp server 2.30.151
• southrivertech titan ftp server 2.31.152
• southrivertech titan ftp server 2.40.155
• southrivertech titan ftp server 3.00.162
• southrivertech titan ftp server 3.01.163
• southrivertech titan ftp server 3.02.165
• southrivertech titan ftp server 3.10.169
• southrivertech titan ftp server 3.12.172
• southrivertech titan ftp server 3.20.175
• southrivertech titan ftp server 3.21.177
• southrivertech titan ftp server 3.22.178
• southrivertech titan ftp server 3.30.186
• southrivertech titan ftp server 4.00.245
• southrivertech titan ftp server 4.01.246
• southrivertech titan ftp server 4.02.248
• southrivertech titan ftp server 4.03.249
• southrivertech titan ftp server 4.05.252
• southrivertech titan ftp server 4.10.256
• southrivertech titan ftp server 4.11.257
• southrivertech titan ftp server 4.13.260
• southrivertech titan ftp server 4.14.261
• southrivertech titan ftp server 4.20.263
• southrivertech titan ftp server 4.21.264
• southrivertech titan ftp server 4.22.265
• southrivertech titan ftp server 4.23.266
• southrivertech titan ftp server 4.30.269
• southrivertech titan ftp server 4.31.272
• southrivertech titan ftp server 5.00.303
• southrivertech titan ftp server 5.01.306
• southrivertech titan ftp server 5.02.307
• southrivertech titan ftp server 5.03.308
• southrivertech titan ftp server 5.03.309
… and 66 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/40237 Vendor Advisory
- http://www.osvdb.org/65622 www.osvdb.org
- http://www.securityfocus.com/archive/1/511873/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40949 www.securityfocus.com
- http://secunia.com/advisories/40237 Vendor Advisory
- http://www.osvdb.org/65622 www.osvdb.org
- http://www.securityfocus.com/archive/1/511873/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40949 www.securityfocus.com