Golden FTP Server Pro Directory Traversal Vulnerability

Bugtraq ID:	13479
Class:	Input Validation Error
CVE:	CVE-2005-1484 CVE-2005-1484
Remote:	Yes
Local:	No
Published:	May 03 2005 12:00AM
Updated:	Mar 19 2015 08:16AM
Credit:	Discovery of this vulnerability is credited to Lachlan. H.
Vulnerable:	KMiNT21 Software Golden FTP Server 2.52 KMiNT21 Software Golden FTP Server 2.16 KMiNT21 Software Golden FTP Server 2.10 KMiNT21 Software Golden FTP Server 2.0 5b KMiNT21 Software Golden FTP Server 2.0 2b KMiNT21 Software Golden FTP Server 1.92 KMiNT21 Software Golden FTP Server 1.31 b KMiNT21 Software Golden FTP Server 1.30 b KMiNT21 Software Golden FTP Server 1.20 b KMiNT21 Software Golden FTP Server 1.0 0b IBM iSeries AS400
Not Vulnerable:

Golden FTP Server Pro Directory Traversal Vulnerability

Golden FTP Server Pro is susceptible to a directory traversal vulnerability.

It is conjectured that this vulnerability allows a remote attacker to read files outside of the FTP document root directory. An attacker may read files with the privileges of the FTP server process.

Golden FTP Server Pro Directory Traversal Vulnerability

No exploit is required.

Golden FTP Server Pro Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Golden FTP Server Pro Directory Traversal Vulnerability

References:

• Golden FTP Server Home Page (KMiNT21 Software)
  
• iSeries Home Page (IBM)
  
• Canonicalization and directory traversal in iSeries FTP security products ("Shalom Carmel" )