CVE-2010-4154

CRITICAL 9.3CVE-2010-4154 · Published 03/11/2010 · updated 16/06/2026

In short

CVE-2010-4154 is a CRITICAL (CVSS 9.3) vulnerability affecting ftp voyager (rhinosoft).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ftp voyager rhinosoft	`= 15.0.0.0= 15.0.0.1= 15.0.0.2= 15.0.0.3= 15.1.0.0= 15.1.0.1= 15.1.0.2= 15.1.0.3= 15.1.0.4= 15.2.0.0= 15.2.0.2= 15.2.0.4= 15.2.0.6= 15.2.0.8= 15.2.0.9≤ 15.2.0.11`	No fix yet

Description

Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

References

marc.info
packetstormsecurity.org/1010-exploits/ftpvoyager-traversal.txt
secunia.com/advisories/41719 · Vendor Advisory
htbridge.ch/advisory/directory_traversal_vulnerability_in_ftp_voyager.html
osvdb.org/68607
securityfocus.com/bid/43869
exchange.xforce.ibmcloud.com/vulnerabilities/62392

More vulnerabilities in ftp voyager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free