CVE-2010-4153

Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
crossftpcrossftp_pro
𝑥
≤ 1.65a
crossftpcrossftp_pro
1.14
crossftpcrossftp_pro
1.15
crossftpcrossftp_pro
1.16
crossftpcrossftp_pro
1.17
crossftpcrossftp_pro
1.18
crossftpcrossftp_pro
1.19
crossftpcrossftp_pro
1.20
crossftpcrossftp_pro
1.21
crossftpcrossftp_pro
1.22
crossftpcrossftp_pro
1.23
crossftpcrossftp_pro
1.24
crossftpcrossftp_pro
1.25
crossftpcrossftp_pro
1.26
crossftpcrossftp_pro
1.27
crossftpcrossftp_pro
1.28
crossftpcrossftp_pro
1.29
crossftpcrossftp_pro
1.30
crossftpcrossftp_pro
1.31
crossftpcrossftp_pro
1.32
crossftpcrossftp_pro
1.33
crossftpcrossftp_pro
1.34
crossftpcrossftp_pro
1.35
crossftpcrossftp_pro
1.36
crossftpcrossftp_pro
1.37
crossftpcrossftp_pro
1.38
crossftpcrossftp_pro
1.39
crossftpcrossftp_pro
1.40
crossftpcrossftp_pro
1.41
crossftpcrossftp_pro
1.42
crossftpcrossftp_pro
1.50
crossftpcrossftp_pro
1.51
crossftpcrossftp_pro
1.52
crossftpcrossftp_pro
1.53
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/41852
http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_crossftp_pro.html
http://www.osvdb.org/68700
http://www.securityfocus.com/bid/44070
https://exchange.xforce.ibmcloud.com/vulnerabilities/62549
http://secunia.com/advisories/41852
http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_crossftp_pro.html
http://www.osvdb.org/68700
http://www.securityfocus.com/bid/44070
https://exchange.xforce.ibmcloud.com/vulnerabilities/62549