CVE-2014-1843

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:southrivertech:titan_ftp_server:*:*:*:*:*:*:*:*
cpe:2.3:a:southrivertech:titan_ftp_server:10.0.1733:*:*:*:*:*:*:*
cpe:2.3:a:southrivertech:titan_ftp_server:10.01.1740:*:*:*:*:*:*:*
cpe:2.3:a:southrivertech:titan_ftp_server:10.30:*:*:*:*:*:*:*

History

21 Nov 2024, 02:05

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html - () http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0092.html -
References () http://www.exploit-db.com/exploits/31579 - Exploit () http://www.exploit-db.com/exploits/31579 - Exploit
References () http://www.osvdb.org/103197 - () http://www.osvdb.org/103197 -
References () http://www.securityfocus.com/bid/65469 - () http://www.securityfocus.com/bid/65469 -

Information

Published : 2014-04-29 10:37

Updated : 2024-11-21 02:05


NVD link : CVE-2014-1843

Mitre link : CVE-2014-1843

CVE.ORG link : CVE-2014-1843


JSON object : View

Products Affected

southrivertech

  • titan_ftp_server
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')