CVE-2010-4149

CRITICAL 9.3CVE-2010-4149 · Published 02/11/2010 · updated 16/06/2026

In short

CVE-2010-4149 is a CRITICAL (CVSS 9.3) vulnerability affecting fresh ftp (freshwebmaster).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fresh ftp freshwebmaster	`= 5.36≤ 5.37`	No fix yet

Description

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.

References

packetstormsecurity.org/1010-exploits/freshftp-traversal.txt
secunia.com/advisories/41798 · Vendor Advisory
htbridge.ch/advisory/directory_traversal_vulnerability_in_freshftp.html
osvdb.org/68667
securityfocus.com/archive/1/514259/100/0/threaded
securityfocus.com/bid/44072
exchange.xforce.ibmcloud.com/vulnerabilities/62555

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free