CVE-2011-4266 - CVE House
Back to Database
Status published Critical CVE-2011-4266

Untrusted search path vulnerability in FFFTP before 1.98d allows local...

Vulnerability Description

Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a different vulnerability than CVE-2011-3991.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4266

Credits & Attribution

No credits recorded in the NVD database.

References

More from ffftp

View All →
CVE-2011-3991
Untrusted search path vulnerability in FFFTP 1.98a and earlier allows...
Critical 9.3

Affected Vendor

Affected Software

ffftp
Vulnerable Versions:
0, 1.79a, 1.80, 1.81, 1.82, 1.83, 1.84, 1.85, 1.86, 1.86a, 1.87, 1.87a, 1.88, 1.88a, 1.88b, 1.89, 1.89a, 1.89b, 1.90, 1.91, 1.92, 1.92a, 1.92b, 1.92c, 1.93, 1.94, 1.94a, 1.95, 1.96, 1.96a, 1.96b, 1.96c, 1.96d, 1.97, 1.97a, 1.97b, 1.98

Timeline

Official Publish: December 13th, 2011
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.