CVE-2008-2889

Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.

Link	Resource
http://vuln.sg/wiseftp558-en.html
http://www.wise-ftp.com/news/index.htm	Patch
http://www.securityfocus.com/bid/29844
http://secunia.com/advisories/30663	Vendor Advisory
http://secunia.com/advisories/30788	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1898/references

Configuration 1

cpe:2.3:a:wise-ftp:wise-ftp:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:wise-ftp:wise-ftp:5.5.8:*:*:*:*:*:*:*

---

Published : 2008-06-27 06:41

Updated : 2011-03-08 03:09

---

NVD link : CVE-2008-2889

Mitre link : CVE-2008-2889

No products.

CWE-22