Description
Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
References
- 43869 vdb-entry
- ftpvoyager-unspecified-dir-traversal(62392) vdb-entry
- 68607 vdb-entry
- http://packetstormsecurity.org/1010-exploits/ftpvoyager-traversal.txt
- http://www.htbridge.ch/advisory/directory_traversal_vulnerability_in_ftp_voyager.html
- 20101008 Directory Traversal Vulnerability in FTP Voyager mailing-list
- 41719 third-party-advisory