CVE-2008-2822

Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary…

published June 23, 2008

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky directory traversal vulnerability in 3D-FTP Client 8.01 allows remote servers to mess with files just by sending a simple command! Think of this as a cheeky delivery person who can drop off packages anywhere in your building just by claiming to have an order — no one checks where it came from! An attacker could exploit this vulnerability to overwrite or create sensitive files on your system, potentially leading to data loss or corruption. Imagine waking up to find your important documents replaced with cat memes — absolutely devastating!

Put simply

Think of this as a cheeky delivery person who can drop off packages anywhere in your building just by claiming to have an order — no one checks where it came from! This vulnerability allows remote FTP servers to exploit directory traversal through the LIST or MLSD commands, using the '..' sequence to navigate to arbitrary folder paths. Essentially, it means users can be tricked into allowing unauthorized file manipulations from seemingly legitimate responses.

What to do

An attacker could exploit this vulnerability to overwrite or create sensitive files on your system, potentially leading to data loss or corruption. Imagine waking up to find your important documents replaced with cat memes — absolutely devastating! To mitigate this issue, consider upgrading to a more secure FTP client that has patched these vulnerabilities. Additionally, restrict the FTP server's permissions to prevent unauthorized file creation or modification. Regular audits of FTP logs can help catch any suspicious activity! You've got this! With a little vigilance and the right updates, you'll keep your files safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03037 · 87.3th percentile
Published
2008-06-23T17:00Z
EPSS history
Timeline
  • 23 JUN 17:00Z
    Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary…
    cvelistv5