CVE-2009-4194

8.1 highEPSS 3.4%

High (8.1) in kmint21 golden ftp server. EPSS 3.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticated users to delete arbitrary files via a .. (dot dot) in the DELE command. NOTE: some of these details are obtained from third party information.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2009-12-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kmint21:golden_ftp_server

References

http://blog.sat0ri.com/?p=292
http://secunia.com/advisories/37527
http://www.exploit-db.com/exploits/10258
https://exchange.xforce.ibmcloud.com/vulnerabilities/54497
http://blog.sat0ri.com/?p=292

Check your stack JSON