Description
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via "C:" sequences in the (1) RETR (get), (2) NLST (ls), (3) LIST (ls), (4) RNFR, or (5) RNTO FTP commands.
References
- 11216 third-party-advisory
- 4557 vdb-entry
- 9970 vdb-entry
- nexgen-dotdot-directory-traversal(15594) vdb-entry
- http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html
- 1009545 vdb-entry