Overview
- Description
- Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:fastream:netfile_ftp_web_server:6.5.1.980:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5091040-461C-4728-AB83-BDF1DC9E837D" }, { "criteria": "cpe:2.3:a:fastream:netfile_ftp_web_server:6.5.1.981:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA9A458D-7881-4E04-B2ED-74ECD0312071" }, { "criteria": "cpe:2.3:a:fastream:netfile_ftp_web_server:6.7.2.1085:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04BB08A3-B939-4C1B-B0EE-F64A9D4E6696" } ], "operator": "OR" } ] } ]