CVE-2010-2426
Titan FTP Server < 8.10.1125 - Authenticated Path Traversal via XCRC Command
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-2426.
PoCs published by jduck, including Metasploit module auxiliary/scanner/ftp/titanftp_xcrc_traversal.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Titan FTP's XCRC command to disclose file contents via CRC brute-forcing. It iteratively retrieves bytes by comparing CRC values to reconstruct the target file.
Description
Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.
Exploits (1)
This Metasploit module exploits a directory traversal vulnerability in Titan FTP's XCRC command to disclose file contents via CRC brute-forcing. It iteratively retrieves bytes by comparing CRC values to reconstruct the target file.