CVEvulnerability

CVE-2010-3867

7.1 HIGH Published 2010-11-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-11-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C
Weaknesses
CWE-22

Description

Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.

Affected configurations

• proftpd proftpd 1.2.10 • proftpd proftpd 1.3.0 • proftpd proftpd 1.3.1 • proftpd proftpd 1.3.2 • proftpd proftpd 1.3.3

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References