Corba Software Ghetto FTP Server Directory Traversal Vulnerability

Bugtraq ID:	2696
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 17 2001 12:00AM
Updated:	Feb 17 2001 12:00AM
Credit:	Posted to Bugtraq by Tom Tom <[email protected]> on May 6, 2001 and discovered by t-Omicr0n <[email protected]> on February 17, 2001.
Vulnerable:	Corba Software Ghetto FTP Server 1.0 beta1 - Microsoft Windows 95 - Microsoft Windows 98
Not Vulnerable:

Corba Software Ghetto FTP Server Directory Traversal Vulnerability

A vulnerability exists in Corba Software FTP Server which allows a remote user to traverse the directories of a target host. This may lead to the disclosure of file and directory contents. Arbitrary directories can be accessed through the use of '/' when using the 'cd' command.

Corba Software Ghetto FTP Server Directory Traversal Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Corba Software Ghetto FTP Server Directory Traversal Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Corba Software Ghetto FTP Server Directory Traversal Vulnerability

References:

• Ghetto FTP Server Homepage (Corba Software)