OSVDB ID: 17678 Title: Golden FTP Server Pro LS Command Traversal Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Golden FTP Server Pro contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered due to an input validation error in the handling of the LS command. By changing directory to a share and then passing "\.." as an argument to the LS command, it will disclose the contents of the application directory (e.g. containing files with names of valid users) resulting in a loss of confidentiality. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Information Disclosure, Input Manipulation Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
ahoo.com -