CVE-2010-3096

Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via "..\" (dot dot backslash) sequences in a filename.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2010-08-20

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Ftp Client (Softx)

References

• http://secunia.com/advisories/40973
• http://www.htbridge.ch/advisory/directory_traversal_in_softx_ftp_client.html
• http://www.securityfocus.com/archive/1/513085/100/0/threaded