Unscored severity · published Dec 13, 2011
CVE-2011-4266
Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Ffftp · Ffftp
through 1.98; 1.79a; 1.80; 1.81; 1.82; 1.83; +33 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4266
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4266
jvn.jp
http://jvn.jp/en/jp/JVN94002296/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000104
sourceforge.jp
http://sourceforge.jp/projects/ffftp/wiki/Security
More from Ffftp
–
CVE-2011-3991
Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions