TNFTP FTP Client Directory Traversal Vulnerability
BID:11965
Info
TNFTP FTP Client Directory Traversal Vulnerability
| Bugtraq ID: | 11965 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-1294 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | Yosef Klein disclosed this vulnerability. |
| Vulnerable: |
Luke Mewburn TNFTP 20030825 |
| Not Vulnerable: | |
Discussion
TNFTP FTP Client Directory Traversal Vulnerability
The tnftp FTP client is reported susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data.
This vulnerability results in the ability of the attacker controlling a malicious remote server being able to write to arbitrary locations on the client's computer with the privileges of the user invoking the vulnerable FTP client. Depending on the particular configuration of the vulnerable FTP client, new files may be created, files may be overwritten, or appended to. Depending on the configuration, this may also occur without confirmation.
The tnftp FTP client is reported susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data.
This vulnerability results in the ability of the attacker controlling a malicious remote server being able to write to arbitrary locations on the client's computer with the privileges of the user invoking the vulnerable FTP client. Depending on the particular configuration of the vulnerable FTP client, new files may be created, files may be overwritten, or appended to. Depending on the configuration, this may also occur without confirmation.
Exploit / POC
TNFTP FTP Client Directory Traversal Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
TNFTP FTP Client Directory Traversal Vulnerability
Solution:
Gentoo has released an advisory and fixes. To upgrade to the latest version enter the following commands:
emerge --sync
emerge --ask --oneshot --verbose ">=net-ftp/tnftp-20050103"
Solution:
Gentoo has released an advisory and fixes. To upgrade to the latest version enter the following commands:
emerge --sync
emerge --ask --oneshot --verbose ">=net-ftp/tnftp-20050103"
References
TNFTP FTP Client Directory Traversal Vulnerability
References:
References:
- [remote] [control] tnftp 20030825 does not check for directory escapes ("D. J. Bernstein"
- TNFTP, TNFTPD Home Page (Luke Mewburn)