CVE-2010-2426

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-06-24 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.

Affected products

Southrivertech Titan Ftp Server: through 8.10.1125; 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22 (+119)

References

http://osvdb.org/65533
http://secunia.com/advisories/40237
http://www.securityfocus.com/archive/1/511839/100/0/threaded
http://www.securityfocus.com/bid/40949
https://exchange.xforce.ibmcloud.com/vulnerabilities/59492
http://osvdb.org/65533
http://secunia.com/advisories/40237
http://www.securityfocus.com/archive/1/511839/100/0/threaded
http://www.securityfocus.com/bid/40949
https://exchange.xforce.ibmcloud.com/vulnerabilities/59492

Get alerted when CVE-2010-2426 or the next vulnerability affects your stack