PlatinumFTPServer Directory Traversal Variant Vulnerability

Bugtraq ID:	6925
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 24 2003 12:00AM
Updated:	Feb 24 2003 12:00AM
Credit:	Discovery of this issue is credited to Pui Kin Ser <[email protected]>.
Vulnerable:	PlatinumFTP PlatinumFTPserver 1.0.11 PlatinumFTP PlatinumFTPserver 1.0 .10
Not Vulnerable:

PlatinumFTPServer Directory Traversal Variant Vulnerability

Some PlatinumFTPServer commands may allow remote users to break out of the FTP root directory. This may potentially be exploited to list files that are on the local system. Under some circumstances, it may be possible to retrieve files or upload malicious files to directories on the local system which are accessible by the FTP server.

This issue is a variant of the issues described in BID 6554 and BID 6691.

PlatinumFTPServer Directory Traversal Variant Vulnerability

This issue can be exploited with an FTP client.

PlatinumFTPServer Directory Traversal Variant Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PlatinumFTPServer Directory Traversal Variant Vulnerability

References:

• PlatinumFTPserver Product Page (PlatinumFTP)
  
• Vulnerability for Platinum FTP version 1.0.11 (Pui Kin Ser )