Nessus Plugin #11206

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

War FTP Daemon Directory Traversal

Family:

FTP

Category:

attack

Copyright:

This script is Copyright (C) 2003 Digital Defense, Inc.

Summary:

WarFTPd Directory Traversal

Version:

$Revision: 1.5 $

Cve_id:

CVE-2001-0295

Bugtraq_id:

2444

Xrefs:

-

Description:

The version of WarFTPd running on this host contains a vulnerability that
may allow a potential intruder to gain read access to directories and files
outside of the ftp root. By sending a specially crafted 'dir' command,
the server may disclose an arbitrary directory.

Solution:
Visit the following link and download the latest version of WarFTPd:

ftp://ftp.jgaa.com/pub/products/Windows/WarFtpDaemon/

Risk factor: Low