Golden FTP Server Pro Multiple Remote Vulnerabilities

Bugtraq ID:	14124
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 01 2005 12:00AM
Updated:	Jul 01 2005 12:00AM
Credit:	Discovery is credited to Lachlan. H.
Vulnerable:	KMiNT21 Software Golden FTP Server 2.60
Not Vulnerable:

Golden FTP Server Pro Multiple Remote Vulnerabilities

Golden FTP Server Pro is affected by multiple remote vulnerabilities.

The following specific issues were identified:

Golden FTP Server Pro is susceptible to a directory traversal vulnerability. A remote attacker may disclose file names and user names from the application directory.

An attacker can disclose the absolute path of a share by attempting to retrieve a file that does not exist.

These issues may aid in other attacks against the affected computer.

Golden FTP Server Pro 2.60 is affected by these vulnerabilities.

Golden FTP Server Pro Multiple Remote Vulnerabilities

An exploit is not required.

Golden FTP Server Pro Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Golden FTP Server Pro Multiple Remote Vulnerabilities

References:

• Golden FTP Server Home Page (KMiNT21 Software)