Unscored CVE-2013-5655 EUVD-2013-5494GHSA-89f6-x478-q78m

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and …

Published May 14, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the default URI.

References

[oss-security] 20130929 YingZhi Python Programming Language for iOS ftp .. bug & httpd arbitrary upload mailing-list
96719 vdb-entry
62074 vdb-entry
[oss-security] 20130930 Re: YingZhi Python Programming Language for iOS ftp .. bug & httpd arbitrary upload mailing-list