Titan FTP Server CVE-2014-1842 Directory Traversal Vulnerability

Bugtraq ID:	65465
Class:	Input Validation Error
CVE:	CVE-2014-1842
Remote:	Yes
Local:	No
Published:	Feb 10 2014 12:00AM
Updated:	Feb 10 2014 12:00AM
Credit:	Luciano Martins
Vulnerable:	Southrivertech Titan FTP Server 10.32 Build 1816
Not Vulnerable:	Southrivertech Titan FTP Server 10.40 Build 1829

Titan FTP Server CVE-2014-1842 Directory Traversal Vulnerability

Titan FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to access arbitrary files that contain sensitive information. Information harvested may aid in launching further attacks.

Titan FTP Server 10.32 Build 1816 is vulnerable; other versions may also be affected.

Titan FTP Server CVE-2014-1842 Directory Traversal Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Titan FTP Server CVE-2014-1842 Directory Traversal Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Titan FTP Server CVE-2014-1842 Directory Traversal Vulnerability

References:

• Titan FTP Server Homepage (South River Technologies)