CVE-2008-1221

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.12% chance of exploitation in the next 30 days, 88th percentile

Published

2008-03-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31345

Security advisories

• http://secunia.com/advisories/29246
• http://www.securityfocus.com/bid/28127

References

• CVE Record
• NVD entry