FileCOPA FTP Server Directory Traversal Vulnerability
BID:44759
Info
FileCOPA FTP Server Directory Traversal Vulnerability
| Bugtraq ID: | 44759 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 07 2010 12:00AM |
| Updated: | Nov 15 2010 03:26PM |
| Credit: | Pawel h0wl Wylecial |
| Vulnerable: |
Intervations FileCopa FTP Server 6.01 |
| Not Vulnerable: |
Intervations FileCopa FTP Server 6.01.01 |
Discussion
FileCOPA FTP Server Directory Traversal Vulnerability
FileCOPA FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to download or upload arbitrary files outside of the FTP server root directory. This may aid in further attacks.
FileCOPA FTP Server 6.01 is affected; other versions may also be vulnerable.
FileCOPA FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to download or upload arbitrary files outside of the FTP server root directory. This may aid in further attacks.
FileCOPA FTP Server 6.01 is affected; other versions may also be vulnerable.
Exploit / POC
FileCOPA FTP Server Directory Traversal Vulnerability
Attackers can use readily available tools and commands to exploit this issue.
The following example input is available:
Attackers can use readily available tools and commands to exploit this issue.
The following example input is available:
Solution / Fix
FileCOPA FTP Server Directory Traversal Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.