VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 12, 2010· Updated Jun 16, 2026

CVE-2010-2695

CVE-2010-2695

Description

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files via .. (dot dot) sequences in the (1) ls, (2) rm, (3) rename, and other unspecified commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Xlightftpd/Xlight FTP Server3 versions
    cpe:2.3:a:xlightftpd:xlight_ftp_server:3.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:xlightftpd:xlight_ftp_server:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:xlightftpd:xlight_ftp_server:3.5.5:*:*:*:*:*:*:*
    • (no CPE)range: <=3.5.5 (pre-3.6)

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.