CVE-2008-2889
AceBIT WISE-FTP 4.1.0 and 5.5.8 - Path Traversal via FTP LIST Command Response
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2889. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in WISE-FTP by sending a malformed LIST command to write arbitrary files outside the intended directory. The PoC leverages insufficient input sanitization to traverse directories and create a file named 'testfile.txt' in an arbitrary location.
Description
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in WISE-FTP by sending a malformed LIST command to write arbitrary files outside the intended directory. The PoC leverages insufficient input sanitization to traverse directories and create a file named 'testfile.txt' in an arbitrary location.