Description
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer, allows user-assisted, remote FTP servers to overwrite files in arbitrary locations via crafted filenames.
References
- VU#415828 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
- 1015036 vdb-entry
- oval:org.mitre.oval:def:1284 vdb-entry signature
- MS05-044 vendor-advisory
- 17223 third-party-advisory
- oval:org.mitre.oval:def:1416 vdb-entry signature
- oval:org.mitre.oval:def:1146 vdb-entry signature
- 17172 third-party-advisory
- http://www.securiteam.com/windowsntfocus/6M00I0KEAU.html
- 17163 third-party-advisory