Vulnerability in Ffftp

CVE-2011-4266

Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.

EPSS: 0.018 (76.5th percentile) — read the EPSS interpretation.

Affected products

  • Ffftp — versions 1.79a, 1.80, 1.81
  • N/a — versions n/a

References