Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4790.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Sysax Multi Server v4.3 via malformed FTP DELE requests, allowing arbitrary file deletion. It authenticates with the server and sends a crafted DELE command with '..//' sequences to escape the FTP root.
Description
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Sysax Multi Server v4.3 via malformed FTP DELE requests, allowing arbitrary file deletion. It authenticates with the server and sends a crafted DELE command with '..//' sequences to escape the FTP root.