• info
• discussion
• exploit
• solution
• references

NetKit FTP Server ChDir Information Disclosure Vulnerability

Netkit FTP Server ('ftpd') is prone to an information-disclosure vulnerability due to a design error.

A local attacker could exploit this issue to bypass access restrictions and gain access to the root directory of the FTP server. Directory information gained may aid in further attacks.

Netkit FTP Server 0.17 and prior versions are affected.