Directory Traversal Vulnerability in AceBIT WISE-FTP
CVE-2008-2889

Currently unrated

Key Information:

Vendor

Wise-ftp

Status
Wise-ftp
Vendor
CVE Published:
27 June 2008

What is CVE-2008-2889?

A directory traversal vulnerability exists in the FTP client of AceBIT WISE-FTP versions 4.1.0 and 5.5.8, enabling remote FTP servers to potentially create or overwrite arbitrary files on vulnerable systems. This security flaw can be exploited through crafted responses containing '..' sequences to LIST commands. This issue parallels similar vulnerabilities identified in previous CVEs, indicating a critical need for users to update to secure versions.

References

http://secunia.com/advisories/30663
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/29844
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2008/1898/references
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.