Description
Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. (dot dot).
References
- 30428 third-party-advisory
- ffftp-list-directory-traversal(42796) vdb-entry
- 29459 vdb-entry
- http://vuln.sg/FFFTP196b-en.html
- 45894 vdb-entry
- ADV-2008-1708 vdb-entry