Path Traversal in Sysax Multi_server
CVE-2009-4800
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.024 (85.5th percentile) — read the EPSS interpretation.
Affected products
- Sysax Multi_server — versions 4.3, 4.5
- N/a — versions n/a
Weakness classification (CWE)
References
- 8256 (exploit, x_refsource_EXPLOIT-DB)
- 34209 (Exploit, vdb-entry, x_refsource_BID)
- sysax-ftpdele-directory-traversal(49360) (vdb-entry, x_refsource_XF)
- 52959 (x_refsource_OSVDB, vdb-entry)
- 34433 (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)