CVE-2016-5725

Published January 19th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

tintinweb/pub

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

GitHub

265