MEDIUM5.3

GHSA-w393-h95m-f879

CoreFTP Directory Traversal

Details

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a `\..\..\` substring, allowing an attacker to enumerate file existence based on the returned information.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/CoreFtp

Introduced in: 0

No fixed version published yet for CoreFtp (nuget). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-9648[ADVISORY]
https://github.com/sparkeh9/CoreFTP[PACKAGE]
https://seclists.org/fulldisclosure/2019/Mar/23[WEB]
https://web.archive.org/web/20210125013812/https://www.securityfocus.com/bid/107446[WEB]
https://www.exploit-db.com/exploits/46535[WEB]
http://packetstormsecurity.com/files/154204/CoreFTP-Server-SIZE-Directory-Traversal.html[WEB]
http://seclists.org/fulldisclosure/2019/Aug/21[WEB]
http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509[WEB]