Charles Clark Meteor FTP Directory Traversal Vulnerability
BID:3374
Info
Charles Clark Meteor FTP Directory Traversal Vulnerability
| Bugtraq ID: | 3374 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-1031 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 28 2001 12:00AM |
| Updated: | Jul 11 2009 07:56AM |
| Credit: | Discovered and posted to Bugtraq by [email protected] on Sep 28, 2001. |
| Vulnerable: |
Charles Clark Meteor FTP 1.0 |
| Not Vulnerable: | |
Discussion
Charles Clark Meteor FTP Directory Traversal Vulnerability
Meteor FTP is a FTP server for Windows environments by Charles Clark.
Authenticated users can gain read access to the directories of the host where the FTP server has been installed. Through the use of '../', '/../' or '.../' sequences when submitting a 'ls' command, arbitrary directories and files could be disclosed, potentially compromising the privacy of user data and/or obtaining information which could be used to further compromise the host's security.
If successfully exploited this vulnerability could lead to the disclosure of sensitive information assisting in further attacks against the host.
Meteor FTP is a FTP server for Windows environments by Charles Clark.
Authenticated users can gain read access to the directories of the host where the FTP server has been installed. Through the use of '../', '/../' or '.../' sequences when submitting a 'ls' command, arbitrary directories and files could be disclosed, potentially compromising the privacy of user data and/or obtaining information which could be used to further compromise the host's security.
If successfully exploited this vulnerability could lead to the disclosure of sensitive information assisting in further attacks against the host.
Exploit / POC
Charles Clark Meteor FTP Directory Traversal Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Charles Clark Meteor FTP Directory Traversal Vulnerability
Solution:
Charles Clark has released a fixed version of Meteor FTP:
Charles Clark Meteor FTP 1.0
Solution:
Charles Clark has released a fixed version of Meteor FTP:
Charles Clark Meteor FTP 1.0
-
Charles Clark Meteor FTP
http://207.202.218.172/meteorftp.exe
References
Charles Clark Meteor FTP Directory Traversal Vulnerability
References:
References:
- Meteor FTP Homepage (Charles Clark)