VULNERABILITY INTELLIGENCE
CVE-2010-2425
CVSS score6.5 MEDIUM
EPSS probability1.22%
CISA KEVNot currently listed
Published2010-06-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Description
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')