CVE-2014-1442

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-05-02 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.

Affected products

Coreftp Core FTP: 1.2

References

http://coreftp.com/forums/viewtopic.php?t=2985707
http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html
http://seclists.org/fulldisclosure/2014/Feb/39
http://secunia.com/advisories/56850
http://www.osvdb.org/102967
http://coreftp.com/forums/viewtopic.php?t=2985707
http://packetstormsecurity.com/files/125073/Core-FTP-Server-1.2-DoS-Traversal-Disclosure.html
http://seclists.org/fulldisclosure/2014/Feb/39
http://secunia.com/advisories/56850
http://www.osvdb.org/102967

Get alerted when CVE-2014-1442 or the next vulnerability affects your stack