Description
Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.
References
- 13704 third-party-advisory
- http://www.7a69ezine.org/node/view/176
- 20041230 7a69Adv#17 - Internet Explorer FTP download path disclosure mailing-list