Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard . characters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Typsoft_ftp_server | Typsoft | 0.85 (including) | 0.85 (including) |
| Typsoft_ftp_server | Typsoft | 0.93 (including) | 0.93 (including) |
| Typsoft_ftp_server | Typsoft | 0.95 (including) | 0.95 (including) |
| Typsoft_ftp_server | Typsoft | 0.96 (including) | 0.96 (including) |
| Typsoft_ftp_server | Typsoft | 0.97 (including) | 0.97 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html
- http://www.iss.net/security_center/static/6165.php
- http://www.securityfocus.com/bid/2489
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html
- http://www.iss.net/security_center/static/6165.php
- http://www.securityfocus.com/bid/2489