CVE-2014-0604

High

Published: 06/02/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2014-0604 is a vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before version 14.1.429, allowing remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update the Attachmate Reflection FTP Client to version 14.1.429 or later to mitigate this vulnerability.

Other vulnerabilities in rftpcom.dll ActiveX control in Attachmate Reflection FTP Client

CVE-2014-0605High
Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before version 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method.

Original NVD description (English source)

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.