CVE-2010-2425

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2010-06-24

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Titan Ftp Server (Southrivertech)

References

• http://secunia.com/advisories/40237
• http://www.osvdb.org/65622
• http://www.securityfocus.com/archive/1/511873/100/0/threaded
• http://www.securityfocus.com/bid/40949