DeskShare Auto FTP Manager Directory Traversal Vulnerability
BID:42611
Info
DeskShare Auto FTP Manager Directory Traversal Vulnerability
| Bugtraq ID: | 42611 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 19 2010 12:00AM |
| Updated: | Aug 19 2010 12:00AM |
| Credit: | High-Tech Bridge SA |
| Vulnerable: |
DeskShare Auto FTP Manager 4.31 |
| Not Vulnerable: | |
Discussion
DeskShare Auto FTP Manager Directory Traversal Vulnerability
DeskShare Auto FTP Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to download or upload arbitrary files. This may aid in further attacks.
DeskShare Auto FTP Manager 4.31 is vulnerable; other versions may also be affected.
DeskShare Auto FTP Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to download or upload arbitrary files. This may aid in further attacks.
DeskShare Auto FTP Manager 4.31 is vulnerable; other versions may also be affected.
Exploit / POC
DeskShare Auto FTP Manager Directory Traversal Vulnerability
Attackers can use readily available tools and commands to exploit this issue.
Attackers can use readily available tools and commands to exploit this issue.
Solution / Fix
DeskShare Auto FTP Manager Directory Traversal Vulnerability
Solution:
Reports indicate that this issue has been fixed. Please see the references for more information.
Solution:
Reports indicate that this issue has been fixed. Please see the references for more information.
References
DeskShare Auto FTP Manager Directory Traversal Vulnerability
References:
References: