CVE-2015-7601CWE-22path-traversal

CVE-2015-7601

High · published September 29, 2015

Patch now

High probability of exploitation

CVSS calls it high at 7.8. It sits in the 99.1th percentile for exploit probability.

CVSS v2.0
7.8
EPSS
59%
Percentile
99.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.58605 · 99.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2015-09-29T23:59Z
Affected products (1)
ProductVersionsFixed in
pcman/ftp_serverall versions—
References (4)
http://packetstormsecurity.com/files/133756/PCMan-FTP-Server-2.0.7-Directory-Traversal.html · [email protected]https://www.exploit-db.com/exploits/38340/ · [email protected]http://packetstormsecurity.com/files/133756/PCMan-FTP-Server-2.0.7-Directory-Traversal.html · af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/38340/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 SEP 19:00Z
    Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR…
    cvelistv5