Description
Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.
References
- http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_freshftp.html
- http://packetstormsecurity.org/1010-exploits/freshftp-traversal.txt
- 44072 vdb-entry
- 20101013 Directory Traversal Vulnerability in FreshFTP mailing-list
- freshftp-ftp-dir-traversal(62555) vdb-entry
- 41798 third-party-advisory
- 68667 vdb-entry