CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.12% chance of exploitation in the next 30 days, 87th percentile

Published

2008-03-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31345

References

• CVE Record
• NVD entry

Related

• CVE-2008-1220
• CVE-2008-1225
• CVE-2008-1219
• CVE-2008-1228
• CVE-2008-1218
• CVE-2008-1229