CVE-2010-4095

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-26 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. (dot dot) in a filename in a server response.

Affected products

Robo-Ftp: 3.7.3, 3.7.4

References

http://kb.robo-ftp.com/change_log/show/77
http://secunia.com/advisories/41809
http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_robo_ftp.html
http://www.securityfocus.com/archive/1/514267/100/0/threaded
http://www.securityfocus.com/bid/44073
https://exchange.xforce.ibmcloud.com/vulnerabilities/62548
http://kb.robo-ftp.com/change_log/show/77
http://secunia.com/advisories/41809
http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_robo_ftp.html
http://www.securityfocus.com/archive/1/514267/100/0/threaded
http://www.securityfocus.com/bid/44073
https://exchange.xforce.ibmcloud.com/vulnerabilities/62548

Get alerted when CVE-2010-4095 or the next vulnerability affects your stack