Description
Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.
References
- 17205 vdb-entry
- baby-ftp-information-disclosure(25413) vdb-entry
- 19338 third-party-advisory
- ADV-2006-1069 vdb-entry
- 24057 vdb-entry