CVE-2019-9648 CoreFTP Directory Traversal
An attacker can enumerate file existence via directory traversal in the SFTP Server component of Core FTP.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-9648?
CVE-2019-9648 is a medium-severity path traversal vulnerability in n/a, published on 22 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.
Weakness: CWE-22
Which versions are affected by CVE-2019-9648?
2 open source packages ship an affected version, including CoreFtp. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
CoreFtp NuGet | All versions to 2.0 | None |
CoreFtp NuGet | All versions to 2.0 | None |
Products include Coreftp Core Ftp.
How do I fix CVE-2019-9648?
No fix has been published for CVE-2019-9648 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2019-9648 being exploited?
There is no known exploitation of CVE-2019-9648 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w393-h95m-f879.