Description
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
References
- 20050315 [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability mailing-list
- http://www.infobyte.com.ar/adv/ISR-03.html
- 1013407 vdb-entry
- 14537 third-party-advisory
- 12766 vdb-entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm
- ichain-path-disclosure(19643) vdb-entry