Description
Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in a GET request.
References
- 6355 vdb-entry
- kunani-dotdot-directory-traversal(10819) vdb-entry
- 20021210 KunaniFTP-Server v.1.0.10 allows dictionary traversal mailing-list