Directory traversal in multiple FTP clients updated since 05.08.2010
Published:		13.10.2010
Source:		BUGTRAQ
SecurityVulns ID:		11029
Type:		local
Level:		5/10
Description:		It's possible for file to be downloaded outside directory choosen by user.

Affected:		INTERNETSOFT : FTP Commander 8.02
		TURBOFTP : TurboFTP Client 6.0
		ELECTRASOFT : 32bit FTP Client 10.07
		FRIGATE : Frigate 3.36
		SMARTSOFT : SmartFTP 4.0
		IORUSH : FTP Rush 1.1
		FTPX : FTP Explorer 10.5
		SOFTX : SoftX FTP Client 3.3
		SITEDESIGNER : 3D FTP Client 9.0
		DESKSHARE : AutoFTP Manager 4.31
		FTPGETTER : FTPGetter 3.51
		FILTERFTP : FilterFTP 2.0
		FTPVOYAGER : FTP Voyager 15.2
		CROSSFTP : CrossFTP Pro 1.65
		ROBOFTP : Robo-FTP 3.7
		ANYCONNECT : AnyConnect 1.2
		FRESHWEBMASTER : FreshFTP 5.36

Original document		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in AnyConnect (13.10.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in FreshFTP (13.10.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in Robo-FTP (13.10.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in CrossFTP Pro (13.10.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in FTP Voyager (11.10.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in FilterFTP (11.10.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in AutoFTP Manager (23.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in FTPGetter (23.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in 3D FTP Client (23.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in SoftX FTP Client (16.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in FTP Explorer (08.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in FTP Rush (08.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in SmartFTP (08.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal in Frigate 3 built-in FTP client (08.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in 32bit FTP Client (05.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in FTP Commander Deluxe (05.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in FTP Commander (05.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in TurboFTP 6 Client (05.08.2010)
		advisory_(at)_htbridge.ch, Directory Traversal Vulnerability in FTP Commander Pro (05.08.2010)

Discuss:

Read or add your comments to this news (0 comments)