Vulnerability CVE-2017-6510

Vulnerability CVE-2017-6510

Published: 2017-03-16

Description:

Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5/10	2.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	None

Affected software
Efssoft -> Easy file sharing ftp server

References:

http://www.securityfocus.com/bid/96944

https://www.rapid7.com/db/modules/auxiliary/scanner/ftp/easy_file_sharing_ftp

Copyright 2024, cxsecurity.com