CVE-2015-7601

High

Published: 29/09/2015(UTC)Updated: 19/08/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

58.33%

99th percentile - higher than 99% of all known CVEs

Summary

CVE-2015-7601 is a directory traversal vulnerability in PCMan's FTP Server 2.0.7 that allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.

Risk Assessment

Attackers may gain access to sensitive data on the server, potentially leading to information disclosure or further attacks on the system.

Recommendation

It is recommended to update PCMan's FTP Server to the latest version to mitigate this vulnerability and implement appropriate security measures, such as restricting file access.

Original NVD description (English source)

Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.