CVE-2010-2426

CVSS V2 Medium 4 CVSS V3 None
Description
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.
Overview
  • CVE ID
  • CVE-2010-2426
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2010-06-24T12:17:45
  • Last Modified Date
  • 2018-10-10T19:59:33
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:southrivertech:titan_ftp_server:*:*:*:*:*:*:*:* 1 OR 8.10.1125
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.25:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.27:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.28:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.29:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.0.31:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.1.33:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:1.11.34:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.0.44:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.00.95:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.01.96:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.02.99:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.10.119:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.10.120:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.10.121:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.11.132:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.20.140:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.21.142:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.30.151:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.31.152:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:2.40.155:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.00.162:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.01.163:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.02.165:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.10.169:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.12.172:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.20.175:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.21.177:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.22.178:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:3.30.186:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.00.245:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.01.246:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.02.248:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.03.249:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.05.252:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.10.256:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.11.257:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.13.260:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.14.261:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.20.263:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.21.264:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.22.265:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.23.266:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.30.269:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:4.31.272:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.00.303:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.01.306:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.02.307:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.03.308:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.03.309:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.03.310:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.04.311:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.04.312:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.04.313:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.04.314:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.04.315:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.316:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.317:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.318:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.319:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.320:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.321:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.322:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.323:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.324:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.325:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.326:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.05.327:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.10.328:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.10.329:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.11.330:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.11.331:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.12.332:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.12.333:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.12.334:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.12.335:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.12.336:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.20.342:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.21.347:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.22.350:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.23.351:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.24.352:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.25.356:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.26.361:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.27.362:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.30.367:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.31.373:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.32.376:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.33.380:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.33.381:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.35.385:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.36.386:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.37.387:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.38.388:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:5.39.389:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.00.492:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.01.512:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.03.537:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.04.545:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.05.550:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.06.555:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.10.560:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.20.587:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.21.596:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.23.616:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.24.621:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.25.622:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:6.26.630:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:7.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:7.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:7.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:7.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:7.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:8.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:8.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:southrivertech:titan_ftp_server:8.10:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:S/C:P/I:N/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 4
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/40949 Exploit
http://osvdb.org/65533
http://secunia.com/advisories/40237 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/59492
http://www.securityfocus.com/archive/1/511839/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2010-2426
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2426
History
Created Old Value New Value Data Type Notes
2022-05-10 18:30:40 Added to TrackCVE