Guild FTPD File Existence Disclosure Vulnerability

Bugtraq ID:	1452
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jul 08 2000 12:00AM
Updated:	Jul 08 2000 12:00AM
Credit:	Discovered by and posted to Bugtraq on July 8, 2000 by Andrew Lewis <[email protected]>.
Vulnerable:	DrPhibez and Nitro187 Guild FTPD 0.9.7 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Guild FTPD File Existence Disclosure Vulnerability

Guild Ftpd will not send files outside of the ftp root when they are specified by the ../ string in the path of the GET request. However due to the difference in the error messages it is able to determine if the file requested exists. The error message "Download failed" appears if the requested file exists and "Access denied" if it does not.

Guild FTPD File Existence Disclosure Vulnerability

ftp> get ../filename
>PORT command successful.
>Opening ascii mode data connection for \../filename.
>Download failed.

Guild FTPD File Existence Disclosure Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Guild FTPD File Existence Disclosure Vulnerability

References:

• Guild FTPD Homepage (Dr.Phibez and Nitro187)