CVE-2008-2894: Nch Software Classic FTP

High severity, CVSS 9.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.

Affected products

• Nch Software Nch Software Classic FTP: version 1.02 only

Published 2008-06-27. Last modified 2026-06-16.