WFTPD Shortcut Directory Traversal Vulnerability

Bugtraq ID:	2957
Class:	Input Validation Error
CVE:	CVE-2001-1386 CVE-2001-1386
Remote:	Yes
Local:	No
Published:	Jul 01 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	Reported to Bugtraq by ByteRage <byterage@yahoo.com> on July 1, 2001.
Vulnerable:	Texas Imperial Software WFTPD 3.0 Pro - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 3.0 0R5 Pro - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R5 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R4 Pro - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R4 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.41 RC14 Pro - Microsoft Windows 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 2.41 RC14 - Microsoft Windows 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 2.40 - Microsoft Windows 3.11 - Microsoft Windows 3.11 - Microsoft Windows 3.1 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 2.4.1 RC12 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.4.1 RC11 Texas Imperial Software WFTPD 2.4.1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0

Not Vulnerable:	Texas Imperial Software WFTPD Pro 3.10 R1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.10 R1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0