Approved changes feed: RSS · Atom

cpe:2.3:a:estsoft:alftp:4.1:beta2:*:en:*:*:*:*

part: a version: 4.1 update: beta2

VendorEstsoft (f9112fc7-e84a-5458-99bb-38ce705b769c)
ProductAlftp (f9c76e8c-1a2a-5b7c-94d5-4ac187e40993)
Edition*
Languageen
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0315 vulnerable 2026-06-08 05:00:40.648853 Details available
Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.
Published: 2012-02-22T11:00:00.000Z
Updated: 2024-09-17T00:50:50.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2702 vulnerable 2026-06-08 04:50:31.618461 Details available
Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Published: 2008-06-13T19:19:00.000Z
Updated: 2024-08-07T09:14:13.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.