ST FTP Service Information Disclosure Vulnerability
BID:7674
Info
ST FTP Service Information Disclosure Vulnerability
| Bugtraq ID: | 7674 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2003 12:00AM |
| Updated: | May 23 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to the RusH security team. |
| Vulnerable: |
STSoft ST FTP Service 3.0 |
| Not Vulnerable: | |
Discussion
ST FTP Service Information Disclosure Vulnerability
A vulnerability has been reported in ST FTP Service. Allegedly, ST FTP Service fails to enforce a document root before sharing files. As a result, a remote attacker may be capable of accessing arbitrary system files with the privileges of the ST FTP process.
A vulnerability has been reported in ST FTP Service. Allegedly, ST FTP Service fails to enforce a document root before sharing files. As a result, a remote attacker may be capable of accessing arbitrary system files with the privileges of the ST FTP process.
Exploit / POC
ST FTP Service Information Disclosure Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
ST FTP Service Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ST FTP Service Information Disclosure Vulnerability
References:
References:
- ST FTP Service v3.0: directory traversal (D4rkGr3y