CVE-2015-7601

Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2015-09-29

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Ftp Server (Pcman)

References

• http://packetstormsecurity.com/files/133756/PCMan-FTP-Server-2.0.7-Directory-Traversal.html
• https://www.exploit-db.com/exploits/38340/