CVE-2014-1843 in Titan FTP Server

الملخص

بحسب MITRE

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• حجز: 02/02/2014
• إفشاء: 29/04/2014
• الاعتدال: تمت الموافقة
• إدخال: VDB-69518
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• استغلال: تحميل
• CVSS: 5.0 (NVD)
• EPSS: 0.04667
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Government, Energy, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-1843
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-1843
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-1843/