CVE-2013-5655

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the default URI.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: May 14, 2014
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-56567.8FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability CVE-2013-56577.5AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request CVE-2013-56586.1AultWare pwStore 2010.8.30.0 has XSS CVE-2013-56597.5Wiz 5.0.3 has a user mode write access violation CVE-2013-56609.3Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file.CVE-2013-56615.9Cache Poisoning issue exists in DNS Response Rate Limiting.CVE-2013-56634.3The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to CVE-2013-56644.3Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x CVE-2013-56664.7The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad trans CVE-2013-566710.0The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell m CVE-2013-56687.8The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentia CVE-2013-56697.8The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attacker