Unrated severityNVD Advisory· Published Nov 9, 2010· Updated Apr 29, 2026
CVE-2010-3867
CVE-2010-3867
Description
Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.
Affected products
32cpe:2.3:a:proftpd:proftpd:1.2.10:*:*:*:*:*:*:*+ 31 more
- cpe:2.3:a:proftpd:proftpd:1.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.2.10:rc1:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.2.10:rc2:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.2.10:rc3:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:a:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc4:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.0:rc5:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.1:rc3:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:a:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:b:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:c:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:d:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:e:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc2:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc3:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.2:rc4:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:a:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:b:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc2:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc3:*:*:*:*:*:*
- cpe:2.3:a:proftpd:proftpd:1.3.3:rc4:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
17- www.securityfocus.com/bid/44562nvdExploit
- secunia.com/advisories/42052nvdVendor Advisory
- bugs.proftpd.org/show_bug.cginvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/050687.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/050703.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/050726.htmlnvd
- secunia.com/advisories/42047nvd
- secunia.com/advisories/42217nvd
- slackware.com/security/viewer.phpnvd
- www.debian.org/security/2011/dsa-2191nvd
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2010/11/01/4nvd
- www.proftpd.org/docs/NEWS-1.3.3cnvd
- www.vupen.com/english/advisories/2010/2853nvd
- www.vupen.com/english/advisories/2010/2941nvd
- www.vupen.com/english/advisories/2010/2959nvd
- www.vupen.com/english/advisories/2010/2962nvd
News mentions
0No linked articles in our index yet.