Description
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not.
References
- 1008756 vdb-entry
- 20040118 Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory mailing-list
- 10661 third-party-advisory
- 9443 vdb-entry
- 3574 vdb-entry