Description
Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
References
- 44070 vdb-entry
- http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_crossftp_pro.html
- 41852 third-party-advisory
- 68700 vdb-entry
- crossftp-ftp-dir-traversal(62549) vdb-entry