CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to…

published January 19, 2017

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24143 · 97.8th percentile
Published
2017-01-19T22:00Z
EPSS history
Timeline
  • 19 JAN 22:00Z
    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to…
    cvelistv5