CVE-2008-5275 | BDVDB-2026-33607 Detail

Description#

Multiple directory traversal vulnerabilities in the (a) "Unzip archive" and (b) "Upload files and archives" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. (dot dot) in a filename within a (1) TAR or (2) ZIP archive. NOTE: this can be leveraged for code execution by creating a .php file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/42994
http://vuln.sg/net2ftp096-en.html
http://www.securityfocus.com/bid/29664
http://secunia.com/advisories/30611

Exploit#

No public exploit known

History#

Version 12008-11-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.