FFFTP Version Detection

This script detects the version of FFFTP client and saves the result in KB. OpenVAS Vulnerability Test $Id: gbffftpdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ FFFTP Version Detection Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is...

FFFTP Version Detection

This script detects the version of FFFTP client. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Directory traversal

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2008-6424

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2008-6424

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2008-6424

The CVE-2008-6424 entry corresponds to a directory traversal flaw in FFFTP 1.96b. An attacker-controlled FTP LIST response containing .. can cause the remote FTP server to create or overwrite arbitrary files on the affected system. The vulnerability arises from how LIST command results are handle...

FFFTP客户端目录遍历漏洞

FFFTP是一款小型的FTP客户端软件。 FFFTP客户端没有正确地验证FTP服务器所返回的LIST命令响应中包含有目录遍历序列（斜线）的文件名，如果用户受骗从恶意的FTP服务器下载的目录包含有带有恶意文件名的文件的话，就可能导致向用户系统的任意位置写入文件。 Jun Sota FFFTP 1.96b Jun Sota -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www2.biglobe.ne.jp/sota/ffftp-e.html LIST响应： -rw-r--r-- 1 502 502 4096 M...