CVE:CVE-2011-4266
CNNVD:CNNVD-201112-153
FFFTP是一款小型的FTP客户端软件。
FFFTP 1.98d之前的版本中存在不信任搜索路径漏洞。本地用户可借助特洛伊木马可执行文件获取权限，该漏洞已在README.exe文件中被证实。
solution:Upgrade ffftp ffftp to a higher version than *:c,1.79a,1.80,1.81,1.82,1.83,1.84,1.85,1.86,1.86a,1.87,1.87a,1.88,1.88a,1.88b,1.89,1.89a,1.89b,1.90,1.91,1.92,1.92a,1.92b,1.92c,1.93,1.94,1.94a,1.95,1.96,1.96a,1.96b,1.96c,1.96d,1.97,1.97a,1.97b,1.98,1.98:a,1.98:b,and avoid the version *:c,1.79a,1.80,1.81,1.82,1.83,1.84,1.85,1.86,1.86a,1.87,1.87a,1.88,1.88a,1.88b,1.89,1.89a,1.89b,1.90,1.91,1.92,1.92a,1.92b,1.92c,1.93,1.94,1.94a,1.95,1.96,1.96a,1.96b,1.96c,1.96d,1.97,1.97a,1.97b,1.98,1.98:a,1.98:b