Nessus Plugin #11374

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

SunFTP directory traversal

Family:

FTP

Category:

mixed

Copyright:

This script is Copyright (C) 2003 Xue Yong Zhi

Summary:

Checks if the remote SunFTP has directory traversal vulnerability

Version:

$Revision: 1.2 $

Cve_id:

CAN-2001-0283

Bugtraq_id:

-

Xrefs:

-

Description:

Directory traversal vulnerability in SunFTP build 9 allows
remote attackers to read arbitrary files via .. (dot dot)
characters in various commands, including (1) GET, (2) MKDIR,
(3) RMDIR, (4) RENAME, or (5) PUT.

Solution : Switching to another FTP server, SunFTP is discontinued.


Risk factor : High