Description
Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via "@" (at) characters in a CD (CWD) command, such as (1) "@/....\", (2) "@@@/..c:\", or (3) "@/..@/..".
References
- enceladus-cd-directory-traversal(11019) vdb-entry
- enceladus-cd-dos(11020) vdb-entry
- 20021219 Multiple vulnerability in Enceladus Server mailing-list