Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.803736
Kategorie:FTP
Titel:Telnet-Ftp Server <= 1.0 Directory Traversal Vulnerability - Active Check
Zusammenfassung:Telnet-Ftp server is prone to directory traversal; vulnerabilities.
Beschreibung:Summary:
Telnet-Ftp server is prone to directory traversal
vulnerabilities.

Vulnerability Insight:
The flaw exists due to error in handling of file names. It does
not properly sanitise filenames containing directory traversal sequences that are received from
an FTP server.

Vulnerability Impact:
Successful exploitation will allow attackers to read arbitrary
files on the affected application.

Affected Software/OS:
Telnet-Ftp Server version 1.0 (Build 1.218) and probably
prior.

Solution:
No known solution was made available for at least one year
since the disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective
features, remove the product or replace the product by another one.

CVSS Score:
4.0

CVSS Vector:
AV:N/AC:L/Au:S/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2006-6240
BugTraq ID: 21339
http://www.securityfocus.com/bid/21339
http://secunia.com/advisories/22921
http://www.vupen.com/english/advisories/2006/4765
XForce ISS Database: sorinchitu-unspecified-directory-traversal(30582)
https://exchange.xforce.ibmcloud.com/vulnerabilities/30582
Common Vulnerability Exposure (CVE) ID: CVE-2006-6241
BugTraq ID: 21340
http://www.securityfocus.com/bid/21340
XForce ISS Database: sorinchitu-retr-dos(30584)
https://exchange.xforce.ibmcloud.com/vulnerabilities/30584
CopyrightCopyright (C) 2013 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.