Summary
The host is running FFFTP and is prone to untrusted search path vulnerability.
Impact
Successful exploitation could allow attackers to execute an arbitrary program in the context of the user running the affected application.
Impact Level: Application
Solution
Upgrade to the FFFTP version 1.98b or later,
For updates refer to http://sourceforge.jp/projects/ffftp/releases/
Insight
The flaw is due to an error in application, loading executables (e.g. notepad.exe) in an insecure manner.
Affected
FFFTP version 1.98a and prior on windows
References
Severity
Classification
-
CVE CVE-2011-3991 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities