CVE-2008-2519: Path Traversal

Published Jun 3, 2008

Updated

Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite arbitrary files via .. (dot dot) sequences in responses to LIST commands, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Affected Software

2 affected components

Core FTP Core FTP=2.1-build_1565

Remediation

Patch Available

http://www.coreftp.com/forums/viewtopic.php?t=6078

Event History

Jun 3, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2519?

CVE-2008-2519 is considered a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2008-2519?

To fix CVE-2008-2519, it is recommended to upgrade to a fixed version of Core FTP that addresses this vulnerability.

What type of attack does CVE-2008-2519 enable?

CVE-2008-2519 enables directory traversal attacks that allow remote attackers to create or overwrite arbitrary files.

Which versions of Core FTP are affected by CVE-2008-2519?

CVE-2008-2519 affects Core FTP version 2.1 Build 1565 for both the LE and PRO editions.

Can CVE-2008-2519 be exploited for code execution?

Yes, CVE-2008-2519 can be exploited for code execution if an attacker writes to a Startup folder on the target system.