7.8
CVSSv2

CVE-2015-7601

Published: 29/09/2015 Updated: 07/11/2017
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 785
Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote malicious users to read arbitrary files via a ..// (dot dot double slash) in a RETR command.

Vulnerable Product Search on Vulmon Subscribe to Product

pcman\\'s ftp server project pcman\\'s ftp server 2.0.7

Exploits

#!/usr/bin/python # title: PCMan FTP Server v207 Directory Traversal # author: Jay Turla <@shipcod3> # tested on Windows XP Service Pack 3 - English # software Link: wwwexploit-dbcom/apps/9fceb6fefd0f3ca1a8c36e97b6cc925d-PCMan7z # description: PCMAN FTP 207 is vulnerable to Directory Traversal (quick and dirty code just for PoC) ...