CVE-2014-1843

Nuclei

Titan FTP Server 10.32 Build 1816 - Directory Traversal

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-1843 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBTitan FTP Server 10.32 Build 1816 - Directory TraversalExploitDB exploitby Fara RusteinNot analyzed1 file

linked to 3 vulnerabilities

ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMTitan FTP Server < 10.40 - User Properties TraversalCVSS 5

Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability that allows remote attackers to view "Properties" of user folders via path traversal. This enables user enumeration and access to sensitive user information that could aid in launching further attacks.

Impact

Unauthenticated attackers can exploit directory traversal to view properties of user folders, enabling user enumeration and reconnaissance for launching targeted attacks against Titan FTP Server.

Remediation

Update Titan FTP Server to version 10.40 build 1829 or later that properly validates file paths and prevents directory traversal in user property access.

WeaknessesCWE-22
Authorspussycat0x
Template tagscvecve2014networkftptitan-ftptcppassivevuln
CVSS vector: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
CPE: cpe:2.3:a:southrivertech:titan_ftp_server:*:*:*:*:*:*:*:*
Shodan: product:"Titan ftpd"

Source: ProjectDiscovery

References

5