CVE-2019-9648
CoreFTP Directory Traversal
Résumé
CoreFTP Directory Traversal
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
NuGet
CoreFtp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web seclists.org
- web web.archive.org
- web exploit-db.com
- web packetstormsecurity.com
- web seclists.org
- web coreftp.com