CVE-2019-9648
CoreFTP Directory Traversal
Summary
CoreFTP Directory Traversal
Original description
The description as published by the source.
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
NuGet
CoreFtp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web seclists.org
- web web.archive.org
- web exploit-db.com
- web packetstormsecurity.com
- web seclists.org
- web coreftp.com