Exploit datawizards ftpxq 2.0.93 - Directory Traversal

[Exploiter]

EDB-ID

20651

Проверка EDB

1. Пройдено

Автор

JOETESTA

Тип уязвимости

LOCAL

Платформа

WINDOWS

CVE

cve-2001-0293

Дата публикации

2001-02-28

source: https://www.securityfocus.com/bid/2426/info

FtpQX is a ftp daemon designed to provide ftp services for Microsoft Operating Systems. It is maintained and distributed by Datawizard Technologies.

A problem in the software could allow access to restricted resources. Due to insufficient input checking, it is possible to retrieve files outside of the ftp root directory. By preappending dots to a GET request, it is possible to traverse directories above the ftp root directory, and retrieve any known file.

This makes it possible for a malicious user with access to the ftp server to gain access to sensitive information, including password files stored on the server. 

ftp> cd ..
ftp> get ../../autoexec.bat