Path Traversal in Idm Computer Solutions Inc Ultraedit
CVE-2008-2795
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) or a ..\ (dot dot backslash) in a response to a LIST command.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.
Affected products
- Idm_computer_solutions_inc Ultraedit — versions 14.00b
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)