Every CVE Search/ Get API key

CVE-2011-4717

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users...

5.5 MediumPublic exploit

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command.

Exploit likelihood

1.84%Down 2.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command.

Record
CVE-2011-4717
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:N/I:P/A:P
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command.

Record
CVE-2011-4717
Updated
2026-11-02
EUVDEUVD-2011-4635 No score

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command.

Record
EUVD-2011-4635
Updated
2026-11-03
GitHub AdvisoriesGHSA-3wvj-8r5h-mr3c No score

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users...

Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command.

Record
GHSA-3wvj-8r5h-mr3c
Weakness
CWE-22
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBzFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal2011-12-11

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4717 is a medium vulnerability (CVSS 5.5) in Zftpserver Suite, published December 20, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 79th percentile. No source names a fixed version.

References

MoveEnter Open