EFTP Directory Traversal Vulnerability
BID:3691
Info
EFTP Directory Traversal Vulnerability
| Bugtraq ID: | 3691 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2001 12:00AM |
| Updated: | Dec 13 2001 12:00AM |
| Credit: | Discovered and posted to Bugtraq by Ertan Kurt <[email protected]>. |
| Vulnerable: |
Khamil Landross and Zack Jones EFTP 2.0.8 .346 |
| Not Vulnerable: |
Khamil Landross and Zack Jones EFTP 2.0.8 .348 |
Discussion
EFTP Directory Traversal Vulnerability
Encrypted File Transfer Protocol (EFTP) utilizes 448bit Blowfish Encryption Algorithm to ensure the secure transfer of files via the FTP protocol. EFTP is maintained by Khamil Landross and Zack Jones.
Authenticated users can gain read access to directories residing on the host where the FTP server has been installed. Through the use of '...' sequences when submitting a 'cwd' command, arbitrary directories and files could be disclosed, potentially compromising the privacy of user data and/or obtaining information which could be used to further compromise the host's security.
If successfully exploited this vulnerability could lead to the disclosure of sensitive information assisting in further attacks against the host.
Encrypted File Transfer Protocol (EFTP) utilizes 448bit Blowfish Encryption Algorithm to ensure the secure transfer of files via the FTP protocol. EFTP is maintained by Khamil Landross and Zack Jones.
Authenticated users can gain read access to directories residing on the host where the FTP server has been installed. Through the use of '...' sequences when submitting a 'cwd' command, arbitrary directories and files could be disclosed, potentially compromising the privacy of user data and/or obtaining information which could be used to further compromise the host's security.
If successfully exploited this vulnerability could lead to the disclosure of sensitive information assisting in further attacks against the host.
Exploit / POC
EFTP Directory Traversal Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
EFTP Directory Traversal Vulnerability
Solution:
The vendor has released a non vulnerable version:
Khamil Landross and Zack Jones EFTP 2.0.8 .346
Solution:
The vendor has released a non vulnerable version:
Khamil Landross and Zack Jones EFTP 2.0.8 .346
-
Khamil Landross and Zack Jones eftp2setup
http://www.eftp.org/eftp2setup.exe