CVE-2021-41636

 

Published at: - 24-06-2022 02:15

Last modified: - 05-07-2022 04:15

Total changes: - 3

Description

MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire operating system, while the access restrictions of the user running the FTP server apply.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://www.securesystems.de/blog/advisory-and-exploitation-the-melag-ftp-server/

 

Keywords

NVD

 

CVE-2021-41636

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures