FFFTP up to 1.98 README.exe untrusted search path

Summaryinfo

A vulnerability, which was classified as critical, was found in FFFTP. This vulnerability affects unknown code of the file README.exe. Executing a manipulation can lead to untrusted search path. This vulnerability is handled as CVE-2011-4266. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in FFFTP and classified as very critical. This vulnerability affects some unknown functionality of the file README.exe. The manipulation with an unknown input leads to a untrusted search path vulnerability. The CWE definition for the vulnerability is CWE-426. The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.

The weakness was released 12/13/2011 (Website). The advisory is shared for download at sourceforge.jp. This vulnerability was named CVE-2011-4266 since 11/02/2011. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/13/2019). The MITRE ATT&CK project declares the attack technique as T1574.

Upgrading to version 1.97b eliminates this vulnerability.

Entry connected to this vulnerability is available at VDB-59385. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• FFFTP

Version

• 1.79a
• 1.80
• 1.81
• 1.82
• 1.83
• 1.84
• 1.85
• 1.86
• 1.86a
• 1.87
• 1.87a
• 1.88
• 1.88a
• 1.88b
• 1.89
• 1.89a
• 1.89b
• 1.90
• 1.91
• 1.92
• 1.92a
• 1.92b
• 1.92c
• 1.93
• 1.94
• 1.94a
• 1.95
• 1.96
• 1.96a
• 1.96b
• 1.96c
• 1.96d
• 1.97
• 1.97a
• 1.97b
• 1.98

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion