QPC QVT Suite FTP Server Directory Traversal Vulnerability

Bugtraq ID:	2618
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 13 2001 12:00AM
Updated:	Apr 13 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by SNS Research <[email protected]> on April 13, 2001.
Vulnerable:	QPC Software QVT/Term 5.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 QPC Software QVT/Net 5.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0
Not Vulnerable:

QPC QVT Suite FTP Server Directory Traversal Vulnerability

A vulnerability exists in QPC QVT Suite FTP Server which allows a remote user to traverse the directories of a target host. This may lead to the disclosure of file and directory contents. Arbitrary directories can be accessed through the use of double dot '../' techniques when using the 'ls' command.

QPC QVT Suite FTP Server Directory Traversal Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

QPC QVT Suite FTP Server Directory Traversal Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

QPC QVT Suite FTP Server Directory Traversal Vulnerability

References:

• QPC Software Homepage (QPC Software)