Floosietek FTGate Web File Access Vulnerability

Bugtraq ID:	280
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 25 1999 12:00AM
Updated:	May 25 1999 12:00AM
Credit:	This vulnerability was published in the BUGTRAQ mailing list by Marc <[email protected]>.
Vulnerable:	Floosietek FTGate 2.1 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

Floosietek FTGate Web File Access Vulnerability

A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files.

Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of the mail server using a web browser via a built-in web server.

The web server fails to check whether requested files fall outside its document tree (by using ".." in the URL). Thus attackers can retrieve files in the same drives as that on which the software resides if they know or can get it's filename.

Floosietek FTGate Web File Access Vulnerability

http://www.example.com:8080/../newuser.txt

Floosietek FTGate Web File Access Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Floosietek FTGate Web File Access Vulnerability

References: