Secunia Logo
Netsikker nu! 2008
 
CVE Reference: CVE-2008-1564
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-1564

Description:
Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in the filename.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/41489

SAID
  Secunia Advisory: SA29540

MISC
  http://sourceforge.net/tracker/index.php?func=detail&aid=1829601&group_id=178021&atid=883559

CONFIRM
  http://sourceforge.net/project/shownotes.php?group_id=178021&release_id=586923

BID
  28453


Return to the previous page.