Nite Server FTPD File Disclosure Vulnerability
BID:6648
Info
Nite Server FTPD File Disclosure Vulnerability
| Bugtraq ID: | 6648 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2003 12:00AM |
| Updated: | Jan 20 2003 12:00AM |
| Credit: | Discovery of this issue is credited to Dennis Rand. |
| Vulnerable: |
Thomas Krebs Nite Server 1.83 |
| Not Vulnerable: |
Thomas Krebs Nite Server 1.85 |
Discussion
Nite Server FTPD File Disclosure Vulnerability
Nite Server is prone to a file disclosure vulnerability. It is possible for remote FTP users to break out of the FTP root directory by issuing a 'cd' (change directory) request containing directory traversal sequences.
This may cause sensitive system files to be disclosed to malicious FTP users.
This issue was reported in Nite Server 1.83. Earlier versions may also be affected.
Nite Server is prone to a file disclosure vulnerability. It is possible for remote FTP users to break out of the FTP root directory by issuing a 'cd' (change directory) request containing directory traversal sequences.
This may cause sensitive system files to be disclosed to malicious FTP users.
This issue was reported in Nite Server 1.83. Earlier versions may also be affected.