CVEvulnerability

CVE-2014-0604

10.0 HIGH Published 2015-02-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-02-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-22

Description

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.

Affected configurations

• attachmate reflection ftp client (<= 14.1.420)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References