Path Traversal in Attachmate Reflection Ftp Client

CVE-2014-0604

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.063 (92.9th percentile) — read the EPSS interpretation.

Affected products

Attachmate Reflection_ftp_client
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_MISC)