Unscored severity · published Jun 27, 2008
CVE-2008-2894
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a
–
CVSS
2.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nch Software Classic Ftp · Nch Software
1.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2894
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2894
Vendor Advisory
http://secunia.com/advisories/30708
vuln.sg
http://vuln.sg/classicftp102-en.html
www.securityfocus.com
http://www.securityfocus.com/bid/29846
www.vupen.com
http://www.vupen.com/english/advisories/2008/1899/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43230