<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ffftp</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2011-4266: Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan h</title><link>https://patchthecve.com/cve/CVE-2011-4266.html</link><guid>https://patchthecve.com/cve/CVE-2011-4266.html</guid><pubDate>Tue, 16 Jun 2026 23:34:40 +0000</pubDate><description>HIGH 9.3: Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a dif</description></item><item><title>CVE-2011-3991: Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code vi</title><link>https://patchthecve.com/cve/CVE-2011-3991.html</link><guid>https://patchthecve.com/cve/CVE-2011-3991.html</guid><pubDate>Tue, 16 Jun 2026 23:34:16 +0000</pubDate><description>HIGH 9.3: Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions.</description></item><item><title>CVE-2008-6424: Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary fi</title><link>https://patchthecve.com/cve/CVE-2008-6424.html</link><guid>https://patchthecve.com/cve/CVE-2008-6424.html</guid><pubDate>Tue, 16 Jun 2026 23:02:12 +0000</pubDate><description>HIGH 8.8: Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot).</description></item></channel></rss>