| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <201006171956.o5HJuLQs002544@www3.securityfocus.com> Date: Thu, 17 Jun 2010 13:56:21 -0600 From: bill@...ensussecurity.com To: bugtraq@...urityfocus.com Subject: TitanFTP Server COMB directory traversal Accensus Security Advisory L-01 TitanFtp Server Arbitrary File Download/Delete Details ============= Product: TitanFTPd Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson http://www.accensussecurity.com Affected: Versions 8.10.1125 and likely previous Issue: the comb command is susceptible to a directory traversal attack which will allow downloading of arbitrary files on the server and deletion of arbitrary files on the server Details: quote comb a ..//..//..//..//b puts contents of 'b' in the file in the users home directory called 'a' and then deletes file b Status: Submitted to Vendor 6/14/10 fixed 6/15/10
Powered by blists - more mailing lists