{"uuid": "67f78e90-bc16-4748-b8e7-2bdb227948f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34110", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die \", \"RvLaboratory\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability found in ColoradoFTP server\\n          version <= 1.3 Build 8. This vulnerability allows an attacker to download and upload arbitrary files\\n          from the server GET/PUT command including file system traversal strings starting with '\\\\'.\\n          The server is written in Java and therefore platform independent, however this vulnerability is only\\n          exploitable on the Windows version.\", \"disclosure_date\": \"2016-08-11\", \"fullname\": \"auxiliary/scanner/ftp/colorado_ftp_traversal\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"ColoradoFTP Server 1.3 Build 8 Directory Traversal Information Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/ftp/colorado_ftp_traversal\", \"references\": [\"CVE-2025-34110\", \"EDB-40231\", \"URL-https://bitbucket.org/nolife/coloradoftp/commits/16a60c4a74ef477cd8c16ca82442eaab2fbe8c86\", \"URL-https://bugtraq.securityfocus.com/archive/1/539186\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:25.517162Z"}