RETIRED: Home FTP Server 1.12 Directory Traversal Vulnerability

Bugtraq ID:	46600
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2011 12:00AM
Updated:	Feb 28 2011 07:28PM
Credit:	clshack
Vulnerable:	Home Ftp Server Home Ftp Server 1.12
Not Vulnerable:

RETIRED: Home FTP Server 1.12 Directory Traversal Vulnerability

Home FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue can allow an attacker to retrieve arbitrary files outside of the FTP server root directory. This may aid in further attacks.

Home FTP Server 1.12 is vulnerable; other versions may also be affected.

This BID is being retired as a duplicate of the issue discussed in BID 44543 (Home FTP Server Directory Traversal Vulnerability).

RETIRED: Home FTP Server 1.12 Directory Traversal Vulnerability

Attackers can exploit this issue through a browser.

RETIRED: Home FTP Server 1.12 Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Home FTP Server 1.12 Directory Traversal Vulnerability

References:

• Home FTP Server Homepage (Ari Pikivirta)