CVE-2008-5175: Visicommedia Aceftp

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to a LIST command, a related issue to CVE-2002-1345.

Affected products

• Visicommedia Aceftp: version 3.80.3 only

Published 2008-11-19. Last modified 2026-06-16.