CVE-2014-1841: Southrivertech Titan FTP Server

Medium severity, CVSS 5.0. EPSS: 4.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter.

Affected products

• Southrivertech Titan FTP Server: up to and including 10.40; version 10.0.1733 only; version 10.01.1740 only; version 10.30 only

Published 2014-04-29. Last modified 2026-06-17.