Description
Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands.
References
- 20040913 Directory Traversal Vulnerability in TwinFTP Server allows overwriting of files outside FTP directory mailing-list
- twinftp-argument-directory-traversal(17323) vdb-entry
- http://www.security.org.sg/vuln/twinftp103r2.html
- 12511 third-party-advisory
- 11159 vdb-entry