CVE-2008-2635

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.24%

Published

Jun 10, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in BitKinex 2.9.3 allow remote FTP and WebDAV servers to create or overwrite arbitrary files via a .. (dot dot) in (1) a response to a LIST command from the BitKinex FTP client and (2) a response to a PROPFIND command from the BitKinex WebDAV client. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Weaknesses (CWE)

CWE-22

Affected Products (1)

barad_dur · bitkinexvulnerable

References (8)

http://secunia.com/advisories/30532

Vendor Advisory

http://vuln.sg/bitkinex293-en.html

http://www.vupen.com/english/advisories/2008/1738/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/42842

http://secunia.com/advisories/30532

Vendor Advisory

http://vuln.sg/bitkinex293-en.html

http://www.vupen.com/english/advisories/2008/1738/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/42842

KEV Catalog EPSS Scores Vendors All CVEs