CVE-2006-0319 - Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands

Published Jan 19, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 6.92%

Description

Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://marc.info/?l=full-disclosure&m=113717162320654&w=2
mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/18508
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.lort.dk/DSR-farmerswife44sp1.pl
x_refsource_MISCExploit
http://www.osvdb.org/22496
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/16321
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0326
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24190
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=full-disclosure&m=113717162320654&w=2		mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/18508		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.lort.dk/DSR-farmerswife44sp1.pl		x_refsource_MISCExploit
http://www.osvdb.org/22496		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/16321		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0326		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24190		vdb-entryx_refsource_XF