5
CVSSv2

CVE-2006-0319

Published: 19/01/2006 Updated: 20/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote malicious users to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands.

Vulnerable Product Search on Vulmon Subscribe to Product

farmers wife farmers wife 4.4_sp1

Exploits

#!/usr/bin/perl # kokanin 20060106 // farmers wife server 44 sp1 allows us to # use /// patterns as long as we stand in a folder where we have write access # haha, that's what you get for implementing your own access control instead of relying on the underlying OS # default port is 22003, default writable path is /guests # 0day 0day, pr ...