Description
Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
References
- 6360 vdb-entry
- VU#210409 third-party-advisory
- 20021211 Directory Traversal Vulnerabilities in FTP Clients mailing-list
- 20021210 Directory Traversal Vulnerabilities in FTP Clients mailing-list
- ftp-client-filename-traversal(10821) vdb-entry