NVD

Id
14144  
Name
CVE-2010-2695  
Description
Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. (dot dot) sequences in the (1) ls, (2) rm, (3) rename, and other unspecified commands.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-07-12  
Modified Date
2010-07-13  
Seq
2010-2695  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78250 14144 CVE-2010-2695 20100705 Xlight FTPd Multiple Directory Traversal in SFTP  View
78251 14144 CVE-2010-2695 http://www.xlightftpd.com/whatsnew.htm  View
78252 14144 CVE-2010-2695 xlight-sftp-directory-traversal(60151)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39800 JVNDB-2010-005585 Xlight FTP Server の SFTP/SSH2 仮想サーバにおけるディレクトリトラバーサルの脆弱性 Xlight FTP Server の SFTP/SSH2 仮想サーバには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-2695 45275 CVE-2010-2695 14144 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005585.html 2010-07-12 2012-12-20 View