Vulnerability in Estsoft Alftp
CVE-2012-0315
Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.
EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.
Affected products
- Estsoft Alftp — versions 4.1, 5.0, 5.1
- N/a — versions n/a
References
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_MISC)
- vultures@jpcert.or.jp (Patch, x_refsource_MISC, Broken Link)
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, VDB Entry, Third Party Advisory, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_MISC, Broken Link)