Description
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.
References
- http://www.netwinsite.com/surgeftp/manual/updates.htm
- 20010619 SurgeFTP vulnerabilities mailing-list
- surgeftp-nlist-directory-traversal(6711) vdb-entry
- 2892 vdb-entry