Vulnerabilities

TI-2023-24489 CVE-2023-45690 · GHSA-mfjh-chmq-4prp

Information leak via default file permissions on Titan MFT and Titan SFTP servers

LOW 26

Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01811 Published 2023-10-16 No fix listed CWE-276

TI-2022-21728 CVE-2022-44215 · GHSA-5vrm-8j75-qxmf

There is an open redirect vulnerability in Titan FTP server 19.0 and below.

MEDIUM 60

There is an open redirect vulnerability in Titan FTP server 19.0 and below.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00877 Published 2023-08-22 No fix listed CWE-601

TI-2023-08807 CVE-2023-22629 · GHSA-vvqp-3hj4-rj73

An issue was discovered in TitanFTP through 1.94.1205.

HIGH 73

An issue was discovered in TitanFTP through 1.94.1205.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.12322 Published 2023-02-14 No fix listed CWE-22

TI-2019-07345 CVE-2019-10009 · GHSA-x777-x9mc-9qhq

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build…

MEDIUM 42

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.11267 Published 2019-06-03 No fix listed CWE-22

TI-2014-01445 CVE-2014-1843 · GHSA-3v2q-6r8m-3j96

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40…

LOW 30

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04477 Published 2014-04-29 No fix listed CWE-22

TI-2014-01444 CVE-2014-1842 · GHSA-8pmx-2fwr-jp92

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40…

LOW 31

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05037 Published 2014-04-29 No fix listed CWE-22

TI-2014-01443 CVE-2014-1841 · GHSA-mc48-68r6-9f6m

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40…

LOW 30

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04654 Published 2014-04-29 No fix listed CWE-22

TI-2010-02330 CVE-2010-2426 · GHSA-qgqh-ff3h-gmfq

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP…

LOW 33

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via ".…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.1226 Published 2010-06-23 No fix listed CWE-22

TI-2010-02329 CVE-2010-2425 · GHSA-pqxh-2px8-rqhh

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP…

LOW 31

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequenc…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01216 Published 2010-06-23 No fix listed CWE-22

TI-2008-05776 CVE-2008-6082 · GHSA-8rwr-fqq6-qgwx

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU…

MEDIUM 52

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.44577 Published 2009-02-06 No fix listed CWE-399

Vulnerabilities

Filters