• info
• discussion
• exploit
• solution
• references

Jigunet TwinFTP Server Directory Traversal Vulnerability

It is reported that TwinFTP Server is susceptible to a directory traversal vulnerability.

This vulnerability presents itself when certain arguments for FTP commands passed to the FTP server contain '../' directory traversal characters.

This vulnerability allows a remote attacker to read and write files outside of the FTP document root directory.