CVEvulnerability
CVE-2010-2426
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.
Affected configurations
• southrivertech titan ftp server (<= 8.10.1125)
• southrivertech titan ftp server 1.0.17
• southrivertech titan ftp server 1.0.18
• southrivertech titan ftp server 1.0.19
• southrivertech titan ftp server 1.0.20
• southrivertech titan ftp server 1.0.21
• southrivertech titan ftp server 1.0.22
• southrivertech titan ftp server 1.0.23
• southrivertech titan ftp server 1.0.24
• southrivertech titan ftp server 1.0.25
• southrivertech titan ftp server 1.0.26
• southrivertech titan ftp server 1.0.27
• southrivertech titan ftp server 1.0.28
• southrivertech titan ftp server 1.0.29
• southrivertech titan ftp server 1.0.30
• southrivertech titan ftp server 1.0.31
• southrivertech titan ftp server 1.1.33
• southrivertech titan ftp server 1.11.34
• southrivertech titan ftp server 2.0.44
• southrivertech titan ftp server 2.00.95
• southrivertech titan ftp server 2.01.96
• southrivertech titan ftp server 2.02.99
• southrivertech titan ftp server 2.10.119
• southrivertech titan ftp server 2.10.120
• southrivertech titan ftp server 2.10.121
• southrivertech titan ftp server 2.11.132
• southrivertech titan ftp server 2.20.140
• southrivertech titan ftp server 2.21.142
• southrivertech titan ftp server 2.30.151
• southrivertech titan ftp server 2.31.152
• southrivertech titan ftp server 2.40.155
• southrivertech titan ftp server 3.00.162
• southrivertech titan ftp server 3.01.163
• southrivertech titan ftp server 3.02.165
• southrivertech titan ftp server 3.10.169
• southrivertech titan ftp server 3.12.172
• southrivertech titan ftp server 3.20.175
• southrivertech titan ftp server 3.21.177
• southrivertech titan ftp server 3.22.178
• southrivertech titan ftp server 3.30.186
• southrivertech titan ftp server 4.00.245
• southrivertech titan ftp server 4.01.246
• southrivertech titan ftp server 4.02.248
• southrivertech titan ftp server 4.03.249
• southrivertech titan ftp server 4.05.252
• southrivertech titan ftp server 4.10.256
• southrivertech titan ftp server 4.11.257
• southrivertech titan ftp server 4.13.260
• southrivertech titan ftp server 4.14.261
• southrivertech titan ftp server 4.20.263
• southrivertech titan ftp server 4.21.264
• southrivertech titan ftp server 4.22.265
• southrivertech titan ftp server 4.23.266
• southrivertech titan ftp server 4.30.269
• southrivertech titan ftp server 4.31.272
• southrivertech titan ftp server 5.00.303
• southrivertech titan ftp server 5.01.306
• southrivertech titan ftp server 5.02.307
• southrivertech titan ftp server 5.03.308
• southrivertech titan ftp server 5.03.309
… and 66 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/65533 osvdb.org
- http://secunia.com/advisories/40237 Vendor Advisory
- http://www.securityfocus.com/archive/1/511839/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40949 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59492 exchange.xforce.ibmcloud.com
- http://osvdb.org/65533 osvdb.org
- http://secunia.com/advisories/40237 Vendor Advisory
- http://www.securityfocus.com/archive/1/511839/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40949 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59492 exchange.xforce.ibmcloud.com