Refine your search
1 vulnerability found for EmFTP Professional by Emurasoft, Inc.
jvndb-2014-000103
Vulnerability from jvndb
Published
2014-09-04 16:36
Modified
2014-09-09 15:15
Summary
EmFTP may insecurely load executable files
Details
EmFTP contains a flaw when loading files, where an unitended executable file may be loaded when attempting to open a file without an extension. For example, if a text file named "exmaple" (without an extension) and an executable "example.exe" are in the same directory, attemtping to open the file "example" will result in the execution of "example.exe".
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000103.html",
"dc:date": "2014-09-09T15:15+09:00",
"dcterms:issued": "2014-09-04T16:36+09:00",
"dcterms:modified": "2014-09-09T15:15+09:00",
"description": "EmFTP contains a flaw when loading files, where an unitended executable file may be loaded when attempting to open a file without an extension. For example, if a text file named \"exmaple\" (without an extension) and an executable \"example.exe\" are in the same directory, attemtping to open the file \"example\" will result in the execution of \"example.exe\".",
"link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000103.html",
"sec:cpe": [
{
"#text": "cpe:/a:emurasoft:emftp_professional",
"@product": "EmFTP Professional",
"@vendor": "Emurasoft, Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:emurasoft:emftp_standard",
"@product": "EmFTP Standard",
"@vendor": "Emurasoft, Inc.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "5.1",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2014-000103",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN50367052/index.html",
"@id": "JVN#50367052",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3910",
"@id": "CVE-2014-3910",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3910",
"@id": "CVE-2014-3910",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "EmFTP may insecurely load executable files"
}