Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

AceFTP 'LIST' Command Directory Traversal Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to connect to a malicious server.

The following proof of concept is available:

Response to LIST:

/../../../../../../../../../testfile.txt\r\n







 

Privacy Statement
Copyright 2008, SecurityFocus