Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Titan FTP Server Multiple Directory Traversal Vulnerabilities
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
This host is running Titan FTP Server and is prone to multiple directory traversal vulnerabilities.
Insight
Insight
- It is possible to copy the complete home folder of another user by leveraging a vulnerability on the Titan FTP Server Web Interface. - It is possible to obtain the complete list of existing users by writing '/../' on the search bar. - It is possible to observe the 'Properties' for an existing user home folder. This also allows for enumeration of existing users on the system.
Affected Software
Affected Software
Titan FTP Server version 10.32 Build 1816.
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
Upgrade to Titan FTP Server 10.40 Build 1829 or later.