CVE-2008-5175

CRITICAL 9.3CVE-2008-5175 · Published 19/11/2008 · updated 16/06/2026

In short

CVE-2008-5175 is a CRITICAL (CVSS 9.3) vulnerability affecting aceftp (visicommedia).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 85.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aceftp visicommedia	`= 3.80.3`	No fix yet

Description

Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.

References

secunia.com/advisories/30792 · Vendor Advisory
vuln.sg/aceftp3803-en.html · Exploit
securityfocus.com/bid/29989
vupen.com/english/advisories/2008/1954/references
exchange.xforce.ibmcloud.com/vulnerabilities/43400

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free