Core FTP 'LIST' Command Directory Traversal Vulnerability

Publish date: July 21, 2015
  Severity: MEDIUM
  CVE Identifier: CVE-2008-2519
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Core FTP is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to write arbitrary files to locations outside of the FTP client's current directory. This could help the attacker launch further attacks.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1003788
  Trend Micro Deep Security DPI Rule Name: 1003788 - Core FTP 'LIST' Command Directory Traversal Vulnerability

  AFFECTED SOFTWARE AND VERSION

  • Core FTP
  • Core FTP client 2.1 Build 1565

Featured Stories