CVE-2008-2822: 3dftp 3d-FTP Client

High severity, CVSS 9.3. EPSS: 3% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a (1) LIST or (2) MLSD command.

Affected products

• 3dftp 3d-FTP Client: version 8.01 only

Published 2008-06-23. Last modified 2026-06-16.