NVD

Id
2315  
Name
CVE-2008-2399  
Description
Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to create or overwrite arbitrary files via .. (dot dot backslash) sequences in responses to (1) MLSD and (2) LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-22  
Modified Date
2011-03-07  
Seq
2008-2399  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14898 2315 CVE-2008-2399 http://vuln.sg/fireftp0971-en.html  View
14899 2315 CVE-2008-2399 VU#906907  View
14900 2315 CVE-2008-2399 http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.58;r2=1.59;f=h  View
14901 2315 CVE-2008-2399 29289  View
14902 2315 CVE-2008-2399 ADV-2008-1596  View
14903 2315 CVE-2008-2399 fireftp-mlsd-list-directory-traversal(42516)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47781 JVNDB-2008-003091 Firefox の FireFTP アドオンにおけるディレクトリトラバーサルの脆弱性 Firefox の FireFTP アドオンには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2399 32512 CVE-2008-2399 2315 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003091.html 2008-05-22 2012-06-26 View