CVE-2010-3867

Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.

CVSS v2.0

7.1 HIGHAV:N/AC:H/Au:S/C:C/I:C/A:C

EPSS

7.56% chance of exploitation in the next 30 days, 94th percentile

Nuclei

high · CWE-22

Published

2010-11-09

Updated

2024-08-07

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/network/cves/2010/CVE-2010-3867.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2010-3863
• CVE-2010-3870
• CVE-2010-3858
• CVE-2010-3879
• CVE-2010-3856
• CVE-2010-3884