Xlight FTP Server version 3.5.5 suffers from multiple directory traversal vulnerabilities.
b6085a823ca16bf1e6ab1591abb8e5a42bb35ac909c54739a36ec195f7777322Accensus Security Group Vulnerability Advisory [L-03]
Date: 7/5/2010
Vendor: https://www.xlightftpd.com/
Effected Software: Xlight FTP Server 3.5.5
Description of Vulnerability:
The SFTP server contains several directory traversal vulnerabilities: get, ls, rm, rename, etc. For example get ../../../../boot.ini will grab c:\boot.ini
Severity: Medium
Local / Remote: Local
Timeline:
Vendor informed 7/2, fix released 7/4
www.accensussecurity.com
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed