CVE-2008-1221

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-03-10 · updated 2026-06-16
Weakness: CWE-22

Description

Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.

Affected products

MicroWorld Technologies Escan: 9.0.742.98
MicroWorld Technologies Escan Management Console: 9.0.742.1
MicroWorld Technologies Escan Server: 9.0.742.1

References

http://aluigi.altervista.org/adv/escaz-adv.txt
http://secunia.com/advisories/29246
http://securityreason.com/securityalert/3723
http://www.securityfocus.com/archive/1/489228/100/0/threaded
http://www.securityfocus.com/bid/28127
https://exchange.xforce.ibmcloud.com/vulnerabilities/41033
http://aluigi.altervista.org/adv/escaz-adv.txt
http://secunia.com/advisories/29246
http://securityreason.com/securityalert/3723
http://www.securityfocus.com/archive/1/489228/100/0/threaded
http://www.securityfocus.com/bid/28127
https://exchange.xforce.ibmcloud.com/vulnerabilities/41033

Get alerted when CVE-2008-1221 or the next vulnerability affects your stack