CVE-2013-5655

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the default URI.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
May 14, 2014
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-56567.8FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerabilityCVE-2013-56577.5AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP requestCVE-2013-56586.1AultWare pwStore 2010.8.30.0 has XSSCVE-2013-56597.5Wiz 5.0.3 has a user mode write access violationCVE-2013-56609.3Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file.CVE-2013-56615.9Cache Poisoning issue exists in DNS Response Rate Limiting.CVE-2013-56634.3The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to CVE-2013-56644.3Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.xCVE-2013-56664.7The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transCVE-2013-566710.0The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell mCVE-2013-56687.8The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentiaCVE-2013-56697.8The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attacker