Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Guildftpd | Steve_poulsen | 0.9.7 (including) | 0.9.7 (including) |