exploits , vulnerabilities , articles , WFTPD Shortcut Directory Traversal Vulnerability

Title	WFTPD Shortcut Directory Traversal Vulnerability
Published	2001-07-01-12:00AM
Updated	2001-10-09-04:39PM
Class	Input Validation Error
CVE	CAN-2001-1386 CVE-2001-1386
Remote	Yes
Local	No
Credit	Reported to Bugtraq by ByteRage <byterage@yahoo.com> on July 1, 2001.
Vulnerable	Texas Imperial Software WFTPD 3.0 Pro Microsoft Windows 2000 Professional Microsoft Windows NT 3.5 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R5 Pro Microsoft Windows 2000 Professional Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R5 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows ME Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R4 Pro Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R4 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 0R3 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 3.0 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.41 RC14 Pro Microsoft Windows 3.1 Microsoft Windows 3.11 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 3.5 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.41 RC14 Microsoft Windows 3.1 Microsoft Windows 3.11 Microsoft Windows 2000 Professional Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 3.5 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.40 Microsoft Windows 3.1 Microsoft Windows 3.11 Microsoft Windows 3.11 Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows NT 3.5 Microsoft Windows NT 3.5.1 Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.4.1 RC12 Microsoft Windows 2000 Professional Microsoft Windows NT 4.0 Texas Imperial Software WFTPD 2.4.1 RC11 Texas Imperial Software WFTPD 2.4.1 Microsoft Windows 2000 Professional Microsoft Windows NT 4.0
Not Vulnerable	Texas Imperial Software WFTPD Pro 3.10 R1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6a Texas Imperial Software WFTPD 3.10 R1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6a
Code	Create a Windows shortcut file (*.lnk) that points to the desired directory on the target system. Upload the file to the target with the filename extension '.LNK.', and enter a change directory command specifying the name of the .lnk file as the argument.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
• 2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
• 2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
• 2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
• 2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
• 2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
• 2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities
• 2009-12-17 ManageEngine Password Manager Pro Cross Site Scripting Vulnerability
• 2009-12-17 HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
• 2009-12-17 iDevSpot iSupport Multiple Cross Site Scripting Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 01:26:38 +0000