CVE-2014-0604

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.
Configurations

Configuration 1 (hide)

cpe:2.3:a:attachmate:reflection_ftp_client:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:02

Type Values Removed Values Added
References () http://support.attachmate.com/techdocs/2501.html - Vendor Advisory () http://support.attachmate.com/techdocs/2501.html - Vendor Advisory
References () http://www.zerodayinitiative.com/advisories/ZDI-14-289/ - () http://www.zerodayinitiative.com/advisories/ZDI-14-289/ -

Information

Published : 2015-02-06 11:59

Updated : 2024-11-21 02:02


NVD link : CVE-2014-0604

Mitre link : CVE-2014-0604

CVE.ORG link : CVE-2014-0604


JSON object : View

Products Affected

attachmate

  • reflection_ftp_client
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')