1. Home
  2. CVE Database
  3. CVE-2014-0604
HIGH · 10.0

CVE-2014-0604

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to th...

Vulnerability Description

Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
AttachmateReflection Ftp Client<= 14.1.420

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2014-0604?

CVE-2014-0604 is a vulnerability with a CVSS score of 10.0 (HIGH). Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to th...

How severe is CVE-2014-0604?

CVE-2014-0604 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0604?

Check the references section above for vendor advisories and patch information. Affected products include: Attachmate Reflection Ftp Client.