CVE-2008-1564

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." (dot dot backslash) in the filename.

Link	Resource
http://sourceforge.net/tracker/index.php?func=detail&aid=1829601&group_id=178021&atid=883559
http://sourceforge.net/project/shownotes.php?group_id=178021&release_id=586923
http://www.securityfocus.com/bid/28453	Exploit Patch
http://secunia.com/advisories/29540	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41489

Configuration 1

cpe:2.3:a:file-transfer:file_transfer:1.2d:*:*:*:*:*:*:* cpe:2.3:a:file-transfer:file_transfer:1.2c:*:*:*:*:*:*:* cpe:2.3:a:file-transfer:file_transfer:1.2e:*:*:*:*:*:*:* cpe:2.3:a:file-transfer:file_transfer:1.2b:*:*:*:*:*:*:*

---

Published : 2008-03-31 10:44

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1564

Mitre link : CVE-2008-1564

No products.

CWE-22