CVE-2010-3867: Path Traversal
Multiple directory traversal vulnerabilities in the modsitemisc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3867?
CVE-2010-3867 has a medium severity rating, as it allows authenticated users to exploit directory traversal vulnerabilities.
How do I fix CVE-2010-3867?
To fix CVE-2010-3867, you should upgrade to ProFTPD version 1.3.3 or later.
What types of attacks can CVE-2010-3867 facilitate?
CVE-2010-3867 can facilitate attacks such as unauthorized directory creation, deletion, symlink creation, and timestamp modification.
Which versions of ProFTPD are affected by CVE-2010-3867?
CVE-2010-3867 affects ProFTPD versions prior to 1.3.3, including 1.2.10 and 1.3.0.
Are any specific modules of ProFTPD impacted by CVE-2010-3867?
CVE-2010-3867 specifically affects the mod_site_misc module of ProFTPD.