CVEvulnerability

CVE-2015-7602

7.8 HIGH Published 2015-09-29 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-09-29
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses: CWE-22

Description

Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.

Affected configurations

• bisonware bisonftp 3.5

Weakness · CWE (1)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References

http://packetstormsecurity.com/files/133749/BisonWare-BisonFTP-3.5-Directory-Traversal.html Exploit
https://www.exploit-db.com/exploits/38341/ Exploit
http://packetstormsecurity.com/files/133749/BisonWare-BisonFTP-3.5-Directory-Traversal.html Exploit
https://www.exploit-db.com/exploits/38341/ Exploit

CVE-2015-7602

Description

Affected configurations

Related

Weakness · CWE (1)

References