Every CVE Search/ Get API key

CVE-2016-5725

Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

5.9 MediumPublic exploitFix available

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

24.1%Up 5.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.9

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
CVE-2016-5725
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
CVE-2016-5725
Updated
2026-11-02
EUVDEUVD-2022-4872 No score

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
EUVD-2022-4872
Updated
2026-11-03
GitHub AdvisoriesGHSA-q446-82vq-w674 5.9

Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
GHSA-q446-82vq-w674
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-22
Updated
2026-11-02
OSV 5.9

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
CVE-2016-5725
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2016-5725 5.9

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
DEBIAN-CVE-2016-5725
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVGHSA-q446-82vq-w674 5.9

Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

Record
GHSA-q446-82vq-w674
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-22
Updated
2026-11-02
OSVMGASA-2016-0311 No score

Updated jsch packages fix security vulnerability

It was discovered that there was a path traversal vulnerability in jsch (CVE-2016-5725).

Record
MGASA-2016-0311
Updated
2026-11-02
OSVSUSE-SU-2017:0715-1 No score

Security update for jsch

This update for jsch to version 0.1.54 fixes the following issues:

Security issues fixed:

  • CVE-2016-5725: recursive sftp get client-side windows path traversal (bsc#997542).

Bugfixes:

  • sftp-put may send the garbage data in some rare case.
  • fixed a deadlock bug in KnownHosts#getHostKey().
  • SftpProgressMonitor#init() was not invoked in sftp-put by using the output-stream.
  • KnownHosts#setKnownHosts() should accept the non-existing file.
  • excluding the user interaction time from the timeout value.
  • addressing SFTP slow file transfer speed with Titan FTP.
  • updating copyright messages; 2015 -> 2016
Record
SUSE-SU-2017:0715-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
com.jcraft:jsch
Maven
 through 0.1.53
0.1.54
jsch
Debian:12
 before 0.1.54-1
0.1.54-1
jsch
Debian:13
 before 0.1.54-1
0.1.54-1
jsch
Debian:14
 before 0.1.54-1
0.1.54-1
jsch
Debian:8
 before 0.1.51-1+deb8u1, plus listed versions
0.1.51-1
0.1.51-1+deb8u1
jsch
Debian:7
 before 0.1.42-2+deb7u1, plus listed versions
0.1.42-2
0.1.42-2+deb7u1
com.jcraft:jsch
Maven
 before 0.1.54, plus listed versions
0.1.230.1.240.1.250.1.270.1.29
Show 17 moreShow less
0.1.310.1.380.1.410.1.420.1.430.1.43-10.1.440.1.44-10.1.450.1.460.1.470.1.480.1.490.1.500.1.510.1.520.1.53
0.1.54
jsch
Mageia:5
 before 0.1.51-4.1.mga5
0.1.51-4.1.mga5
jsch
SUSE:Manager Server 3.0
 before 0.1.54-3.1
0.1.54-3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBJCraft/JSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal2016-09-22

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-5725 is a medium vulnerability (CVSS 5.9) in Jcraft Jsch, published September 5, 2016. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 24.1%, the 97th percentile. Fixed in com.jcraft:jsch 0.1.54.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open