CVE-2010-3867
EUVD-2010-384509.11.2010, 21:00
Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| proftpd | proftpd | 1.2.10 |
| proftpd | proftpd | 1.2.10:rc1 |
| proftpd | proftpd | 1.2.10:rc2 |
| proftpd | proftpd | 1.2.10:rc3 |
| proftpd | proftpd | 1.3.0 |
| proftpd | proftpd | 1.3.0:a |
| proftpd | proftpd | 1.3.0:rc1 |
| proftpd | proftpd | 1.3.0:rc2 |
| proftpd | proftpd | 1.3.0:rc3 |
| proftpd | proftpd | 1.3.0:rc4 |
| proftpd | proftpd | 1.3.0:rc5 |
| proftpd | proftpd | 1.3.1 |
| proftpd | proftpd | 1.3.1:rc1 |
| proftpd | proftpd | 1.3.1:rc2 |
| proftpd | proftpd | 1.3.1:rc3 |
| proftpd | proftpd | 1.3.2 |
| proftpd | proftpd | 1.3.2:a |
| proftpd | proftpd | 1.3.2:b |
| proftpd | proftpd | 1.3.2:c |
| proftpd | proftpd | 1.3.2:d |
| proftpd | proftpd | 1.3.2:e |
| proftpd | proftpd | 1.3.2:rc1 |
| proftpd | proftpd | 1.3.2:rc2 |
| proftpd | proftpd | 1.3.2:rc3 |
| proftpd | proftpd | 1.3.2:rc4 |
| proftpd | proftpd | 1.3.3 |
| proftpd | proftpd | 1.3.3:a |
| proftpd | proftpd | 1.3.3:b |
| proftpd | proftpd | 1.3.3:rc1 |
| proftpd | proftpd | 1.3.3:rc2 |
| proftpd | proftpd | 1.3.3:rc3 |
| proftpd | proftpd | 1.3.3:rc4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References