CVE-2008-2702

Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by writing to a Startup folder.

• CWE-22

• http://secunia.com/advisories/30559Third Party Advisory
• http://vuln.sg/alftp41b2-en.htmlExploit, Third Party Advisory
• http://www.securityfocus.com/bid/29585Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1763/referencesThird Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42900Third Party Advisory, VDB Entry
• http://secunia.com/advisories/30559Third Party Advisory
• http://vuln.sg/alftp41b2-en.htmlExploit, Third Party Advisory
• http://www.securityfocus.com/bid/29585Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2008/1763/referencesThird Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42900Third Party Advisory, VDB Entry

Published

Jun 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2696Exiv2 0.16 allows user-assisted remote attackers to cause a …
• CVE-2008-2697SQL injection vulnerability in the Rapid Recipe (com_rapidre…
• CVE-2008-2698Multiple cross-site scripting (XSS) vulnerabilities in photo…
• CVE-2008-2699Multiple directory traversal vulnerabilities in Galatolo Web…
• CVE-2008-2700SQL injection vulnerability in view.php in Galatolo WebManag…
• CVE-2008-2701SQL injection vulnerability in the GameQ (com_gameq) compone…
• CVE-2008-2703Multiple stack-based buffer overflows in Novell GroupWise Me…
• CVE-2008-2704Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 a…
• CVE-2008-2705Unspecified vulnerability in Sun Java System Access Manager …
• CVE-2008-2706Unspecified vulnerability in the event port implementation i…
• CVE-2008-2707Unspecified vulnerability in the e1000g driver in Sun Solari…
• CVE-2008-2708Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (…