CVE-2008-2889

MEDIUM 6.8CVE-2008-2889 · Published 27/06/2008 · updated 16/06/2026

In short

CVE-2008-2889 is a MEDIUM (CVSS 6.8) vulnerability affecting wise-ftp (wise-ftp).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wise-ftp wise-ftp	`= 4.1.0= 5.5.8`	No fix yet

Description

Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.

References

secunia.com/advisories/30663 · Vendor Advisory
secunia.com/advisories/30788 · Vendor Advisory
vuln.sg/wiseftp558-en.html
securityfocus.com/bid/29844
vupen.com/english/advisories/2008/1898/references
wise-ftp.com/news/index.htm · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free