CVE-2008-6424: Jun Sota Ffftp

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot).

Affected products

• Jun Sota Ffftp: version 1.96b only

Published 2009-03-06. Last modified 2026-06-16.