WFTPD Shortcut Directory Traversal Vulnerability

Bugtraq ID:	2957
Class:	Input Validation Error
CVE:	CVE-2001-1386
Remote:	Yes
Local:	No
Published:	Jul 01 2001 12:00AM
Updated:	Jul 11 2009 06:56AM
Credit:	Reported to Bugtraq by ByteRage <[email protected]> on July 1, 2001.
Vulnerable:	Texas Imperial Software WFTPD 3.0 Pro - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 3.0 0R5 Pro - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R5 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R4 Pro - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R4 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R3 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.41 RC14 Pro - Microsoft Windows 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 2.41 RC14 - Microsoft Windows 3.11 - Microsoft Windows 3.1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 2.40 - Microsoft Windows 3.11 - Microsoft Windows 3.11 - Microsoft Windows 3.1 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Texas Imperial Software WFTPD 2.4.1 RC12 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.4.1 RC11 Texas Imperial Software WFTPD 2.4.1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0
Not Vulnerable:	Texas Imperial Software WFTPD Pro 3.10 R1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.10 R1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0

WFTPD Shortcut Directory Traversal Vulnerability

WFTPD is a popular FTP server software for Windows systems.

The WFTPD server contains a directory traversal vulnerability. It may be possible for remote users to upload files with the filename extension '.LNK.', thereby creating shortcuts to otherwise protected files and directories.

WFTPD Shortcut Directory Traversal Vulnerability

Create a Windows shortcut file (*.lnk) that points to the desired directory on the target system. Upload the file to the target with the filename extension '.LNK.', and enter a change directory command specifying the name of the .lnk file as the argument.

WFTPD Shortcut Directory Traversal Vulnerability

References: