Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. ls C:.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Powerftp | Cooolsoft | 2.03 (including) | 2.03 (including) |