Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via … (triple dot) manipulations to the CWD command.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Baby_ftp_server | Pablo_software_solutions | 1.2 (including) | 1.2 (including) |
References
- http://packetstormsecurity.org/0305-exploits/baby.txt
- http://www.osvdb.org/24538
- http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html
- http://www.securityfocus.com/bid/7749
- http://packetstormsecurity.org/0305-exploits/baby.txt
- http://www.osvdb.org/24538
- http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html
- http://www.securityfocus.com/bid/7749