CVEvulnerability

CVE-2010-4153

9.3 HIGH Published 2010-11-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-11-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-22

Description

Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

Affected configurations

• crossftp crossftp pro (<= 1.65a) • crossftp crossftp pro 1.14 • crossftp crossftp pro 1.15 • crossftp crossftp pro 1.16 • crossftp crossftp pro 1.17 • crossftp crossftp pro 1.18 • crossftp crossftp pro 1.19 • crossftp crossftp pro 1.20 • crossftp crossftp pro 1.21 • crossftp crossftp pro 1.22 • crossftp crossftp pro 1.23 • crossftp crossftp pro 1.24 • crossftp crossftp pro 1.25 • crossftp crossftp pro 1.26 • crossftp crossftp pro 1.27 • crossftp crossftp pro 1.28 • crossftp crossftp pro 1.29 • crossftp crossftp pro 1.30 • crossftp crossftp pro 1.31 • crossftp crossftp pro 1.32 • crossftp crossftp pro 1.33 • crossftp crossftp pro 1.34 • crossftp crossftp pro 1.35 • crossftp crossftp pro 1.36 • crossftp crossftp pro 1.37 • crossftp crossftp pro 1.38 • crossftp crossftp pro 1.39 • crossftp crossftp pro 1.40 • crossftp crossftp pro 1.41 • crossftp crossftp pro 1.42 • crossftp crossftp pro 1.50 • crossftp crossftp pro 1.51 • crossftp crossftp pro 1.52 • crossftp crossftp pro 1.53

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References