CVE-2008-2795

UltraEdit 14.00b - Path Traversal via FTP/SFTP LIST Command Response

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2795. PoCs published by Tan Chew Keong.

AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in UltraEdit's FTP/SFTP client. It provides payload examples for exploiting the issue but does not include executable code.

Description

Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) or a ..\ (dot dot backslash) in a response to a LIST command.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Tan Chew Keong · textremotemultiple
https://www.exploit-db.com/exploits/31936

This is a writeup describing a directory traversal vulnerability in UltraEdit's FTP/SFTP client. It provides payload examples for exploiting the issue but does not include executable code.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: UltraEdit 14.00b
No auth needed
Prerequisites: Access to a malicious or compromised FTP/SFTP server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30749
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43149
Exploit x_refsource_misc
http://vuln.sg/ultraedit1400b-en.html
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29784
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1864/references

Scores

EPSS 0.0807
EPSS Percentile 94.1%

Details

CWE
CWE-22
Status published
Products (1)
idm_computer_solutions_inc/ultraedit 14.00b
Published Jun 20, 2008
Tracked Since Feb 18, 2026