Farmers WIFE FTP Server Directory Traversal Vulnerability

Bugtraq ID:	16321
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2006 12:00AM
Updated:	Apr 20 2006 10:01PM
Credit:	Knud Erik Højgaard is credited with the discovery of this vulnerability.
Vulnerable:	The electronic Farm Farmers WIFE 4.4 SP2 The electronic Farm Farmers WIFE 4.4 SP1
Not Vulnerable:

Farmers WIFE FTP Server Directory Traversal Vulnerability

Farmers WIFE is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to overwrite arbitrary files in the context of the affected application. Depending on the files overwritten, this may facilitate a compromise of the underlying system; other attacks are also possible.

Farmers WIFE FTP Server Directory Traversal Vulnerability


This issue can be exploited manually. No exploit code is required.

Farmers WIFE FTP Server Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Farmers WIFE FTP Server Directory Traversal Vulnerability

References:

• Farmers WIFE Product Homepage (The electronic Farm)