CVE-2015-7602
BisonWare BisonFTP <3.5 - Path Traversal
Title source: llmDescription
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.
Exploits (2)
metasploit
WORKING POC
by Jay Turla, James Fitts · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/bison_ftp_traversal.rb
Scores
EPSS
0.5258
EPSS Percentile
97.9%
Classification
CWE
CWE-22
Status
draft
Affected Products (1)
bisonware/bisonftp
Timeline
Published
Sep 29, 2015
Tracked Since
Feb 18, 2026