CVE-2015-7602

ALTO 7.8CVE-2015-7602 · Published 29/09/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
bisonftp bisonware	`= 3.5`	No fix yet

Description

Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.

References

packetstormsecurity.com/files/133749/BisonWare-BisonFTP-3.5-Directory-Traversal.html · Exploit
exploit-db.com/exploits/38341 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free