FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the ls command and including the drive letter name (e.g. C:) in the requested pathname.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fastream_ftp++_server | Fastream | 2.0 (including) | 2.0 (including) |
| Fastream_ftp_server | Fastream | 2.0beta_11 (including) | 2.0beta_11 (including) |