CVE-2008-2821: Glub Secure FTP

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.

Affected products

• Glub Secure FTP: up to and including 2.5.15

Published 2008-06-23. Last modified 2026-06-16.