Description
Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing.
References
- http://support.apple.com/kb/HT4723
- 48418 vdb-entry
- APPLE-SA-2011-06-23-1 vendor-advisory