Description
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
References
- argosoftftp-unzip-file-disclosure(15411) vdb-entry
- 9770 vdb-entry
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- 11002 third-party-advisory
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- 11333 vdb-entry