32bit FTP Client Directory Traversal Vulnerability

Bugtraq ID:	42122
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 02 2010 12:00AM
Updated:	Aug 02 2010 12:00AM
Credit:	High-Tech Bridge SA
Vulnerable:	ElectraSoft 32Bit FTP 10.8.1 ElectraSoft 32Bit FTP 10.7.9 ElectraSoft 32Bit FTP 09.04.24
Not Vulnerable:

32bit FTP Client Directory Traversal Vulnerability

32bit FTP Client is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue can allow an attacker to download or upload arbitrary files. This may aid in further attacks.

32bit FTP Client 10.08.01 is vulnerable; prior versions may also be affected.

32bit FTP Client Directory Traversal Vulnerability

Attackers can use readily available tools and commands to exploit this issue.

32bit FTP Client Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

32bit FTP Client Directory Traversal Vulnerability

References:

• 32bit FTP Homepage (ElectraSoft)
  
• Directory Traversal Vulnerability in 32bit FTP Client (High-Tech Bridge SA)
  
• Directory Traversal Vulnerability in 32bit FTP Client ([email protected])