PatchTheCVEreflection ftp client vulnerabilities and fixes
Recent CVEs affecting reflection ftp client, with upgrade or downgrade steps. 4 tracked.
Also searched as: reflectionftpclient.
reflection ftp client has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2015-02-06. Highest priority: CVE-2014-0605 (score 59/100).
- CVE-2014-5211 MEDIUM 6.8 DOWNGRADE Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers
- CVE-2014-0605 HIGH 10.0 UPGRADE Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client befor
- CVE-2014-0604 HIGH 10.0 UPGRADE Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client befor
- CVE-2014-0603 HIGH 10.0 UPGRADE The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to
FAQ
How do I fix reflection ftp client vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is reflection ftp client being exploited right now?
None of the tracked reflection ftp client CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which reflection ftp client CVE should I patch first?
CVE-2014-0605 currently ranks highest (59/100): Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client befor.