Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.803736
Kategorie:FTP
Titel:Telnet-Ftp Server Directory Traversal Vulnerability
Zusammenfassung:The host is running Telnet-Ftp server and is prone to directory traversal; vulnerabilities.
Beschreibung:Summary:
The host is running Telnet-Ftp server and is prone to directory traversal
vulnerabilities.

Vulnerability Insight:
The flaw exists due to error in handling of file names. It does not properly
sanitise filenames containing directory traversal sequences that are received from an FTP server.

Vulnerability Impact:
Successful exploitation will allow attackers to read arbitrary files on the
affected application.

Affected Software/OS:
Telnet-Ftp Server version 1.0 (Build 1.218)

Solution:
No known solution was made available for at least one year
since the disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective
features, remove the product or replace the product by another one.

CVSS Score:
4.0

CVSS Vector:
AV:N/AC:L/Au:S/C:P/I:N/A:N

Querverweis: BugTraq ID: 21339
BugTraq ID: 21340
Common Vulnerability Exposure (CVE) ID: CVE-2006-6240
http://www.securityfocus.com/bid/21339
http://secunia.com/advisories/22921
http://www.vupen.com/english/advisories/2006/4765
XForce ISS Database: sorinchitu-unspecified-directory-traversal(30582)
https://exchange.xforce.ibmcloud.com/vulnerabilities/30582
Common Vulnerability Exposure (CVE) ID: CVE-2006-6241
http://www.securityfocus.com/bid/21340
XForce ISS Database: sorinchitu-retr-dos(30584)
https://exchange.xforce.ibmcloud.com/vulnerabilities/30584
CopyrightCopyright (C) 2013 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.