CVE-2008-5275

Multiple directory traversal vulnerabilities in the (a) "Unzip archive" and (b) "Upload files and archives" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. (dot dot) in a filename within a (1) TAR or (2) ZIP archive. NOTE: this can be leveraged for code execution by creating a .php file.

• CWE-22

• http://secunia.com/advisories/30611Vendor Advisory
• http://vuln.sg/net2ftp096-en.html
• http://www.securityfocus.com/bid/29664
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42994
• http://secunia.com/advisories/30611Vendor Advisory
• http://vuln.sg/net2ftp096-en.html
• http://www.securityfocus.com/bid/29664
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42994

Published

Nov 28, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5269SQL injection vulnerability in index.php in pSys 0.7.0 alpha…
• CVE-2008-5270SQL injection vulnerability in view.topics.php in Yuhhu Supe…
• CVE-2008-5271Cross-site scripting (XSS) vulnerability in index.php in Fre…
• CVE-2008-5272Multiple directory traversal vulnerabilities in Fred Stuurma…
• CVE-2008-5273SQL injection vulnerability in viewnews.asp in Todd Woolums …
• CVE-2008-5274Todd Woolums ASP News Management 2.2 allows remote attackers…
• CVE-2008-5276Integer overflow in the ReadRealIndex function in real.c in …
• CVE-2008-5277PowerDNS before 2.9.21.2 allows remote attackers to cause a …
• CVE-2008-5278Cross-site scripting (XSS) vulnerability in the self_link fu…
• CVE-2008-5279The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Mes…
• CVE-2008-5280The Local ZIM Server in Zilab Chat and Instant Messaging (ZI…
• CVE-2008-5281Heap-based buffer overflow in Titan FTP Server 6.05 build 55…