PlatinumFTPServer Dot-Dot-Slash Directory Traversal Vulnerability
BID:6554
Info
PlatinumFTPServer Dot-Dot-Slash Directory Traversal Vulnerability
| Bugtraq ID: | 6554 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 07 2003 12:00AM |
| Updated: | Jan 07 2003 12:00AM |
| Credit: | Vulnerability discovery credited to Dennis Rand. |
| Vulnerable: |
PlatinumFTP PlatinumFTPserver 1.0.6 |
| Not Vulnerable: |
PlatinumFTP PlatinumFTPserver 1.0.7 |
Exploit / POC
PlatinumFTPServer Dot-Dot-Slash Directory Traversal Vulnerability
No exploit is required for this vulnerability.
dir ..\directory
where directory represents a directory outside the FTP root.
del ..\file
where file represents a file outside the FTP root.
No exploit is required for this vulnerability.
dir ..\directory
where directory represents a directory outside the FTP root.
del ..\file
where file represents a file outside the FTP root.
References
PlatinumFTPServer Dot-Dot-Slash Directory Traversal Vulnerability
References:
References:
- PlatinumFTPserver Product Page (PlatinumFTP)
- PlatinumFTPserver Release Notes (PlatinumFTP)