Join our subscribers
Directory Traversal Vulnerability in SoftX FTP Client
| Advisory ID: | HTB22541 |
| Product: | SoftX FTP Client |
| Vendor: | SoftX.Org |
| Vulnerable Versions: | 3.3 for windows and probably prior |
| Tested Version: | 3.3 for windows |
| Advisory Publication: | July 27, 2010 [without technical details] |
| Vendor Notification: | July 27, 2010 |
| Public Disclosure: | August 10, 2010 |
| Vulnerability Type: | Path Traversal [CWE-22] |
| CVE Reference: | CVE-2010-3096 |
| Risk Level: | High |
 | |
| CVSSv2 Base Score: | 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C) |
| Discovered and Provided: | High-Tech Bridge Security Research Lab |
| Advisory Details: | |
High-Tech Bridge SA Security Research Lab has discovered vulnerability in SoftX FTP Client which could be exploited to execute arbitrary code on vulnerable system. | |
| Solution: | |
| Currently we are not aware of any vendor-supplied patches or other solutions. The vendor was contacted in accordance to our Vendor Notification Policy but we didn't get any answer or feedback. | |
References: | |
| [1] High-Tech Bridge Advisory HTB22541 - https://www.immuniweb.com/advisory/HTB22541 - Directory Traversal Vulnerability in SoftX FTP Client [2] SoftX FTP - softx.org - SoftX FTP is a FTP Client for Windows, Windows Mobile and Pocket PC, that gives you a fast, easy and reliable way to transfer files and directories between your personal computer or mobile device, and the FTP server. [3] Common Vulnerabilities and Exposures (CVE) - http://cve.mitre.org/ - international in scope and free for public use, CVE® is a dictionary of publicly known information security vulnerabilities and exposures. [4] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types. | |
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.
