Security Advisory

CVE-2019-9648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-22 18:49:47

Last updated 2024-08-04 21:54:45

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.

← Browse all CVEs View on cve.org ↗