Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/04/2010 Updated: 19/09/2017

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sysax multi server 4.3
sysax multi server 4.5

/* Sysax Multi Server v43 Remote Delete Files Server FTP wwwsysaxcom/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FTP "DELE" requests This can be exploited to escape the FTP root and delete arbitrary files on the system ...

CWE-22 http://osvdb.org/52959 http://secunia.com/advisories/34433 http://www.securityfocus.com/bid/34209 https://exchange.xforce.ibmcloud.com/vulnerabilities/49360 http://www.exploit-db.com/exploits/8256 https://nvd.nist.gov https://www.exploit-db.com/exploits/8256/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-4800

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect