Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. (dot dot) in a filename argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Conti FTP不安全默认帐号及目录遍历漏洞
Vulnerability Description
Conti FtpServer是Windows平台下的多线程FTP服务器。 Conti FTPServer在处理传送给各种命令的参数时存在输入验证错误,允许攻击者通过目录遍历攻击列出并下载FTP根目录以外任意位置的文件。Conti FTPServer以明文将用户口令存储到了MyServerSettings.ini文件中,因此攻击者可以轻易的检索到口令,获得非授权访问。
CVSS Information
N/A
Vulnerability Type
N/A