Description
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
References
- wftpd-path-disclosure(5196) vdb-entry
- 20000905 WFTPD/WFTPD Pro 2.41 RC12 vulnerabilities mailing-list
- 5829 vdb-entry