HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2010-3099

CVSS 9.3v2.0pub. 2010-08-20upd. 2026-04-29

Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows remote FTP servers to overwrite arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.

CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Smartftp

    APP
    Smartftp
    ≤ 4.0.1124.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2010-4871HIGH10.0same product

Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a l...

CVE-2007-0790HIGH7.5same product

Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a larg...

CVE-2003-1319HIGH7.6same product

Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to ex...

CVE-2018-25234MEDIUM6.9same product

SmartFTP Client 9.0.2615.0 zawiera podatność denial of service, która pozwala lokalnym atakującym na spowodowa...

CVE-2021-47791MEDIUM4.6same product

SmartFTP Client 10.0.2909.0 zawiera wiele podatności DoS pozwalających atakującym na crashowanie aplikacji pop...