EUVD-2005-1243

Malware in sbrugna...

[SA15088] Castlehill Computer Services SECURE/NET Directory Traversal Security Bypass

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Castlehill Computer Services SECURE/NET Directory...

CVE-2005-1240

The CVE-2005-1240 entry describes a directory traversal vulnerability in Castlehill’s third-party tool used to secure the iSeries AS/400 FTP server. Attackers could access arbitrary files (including from qsys.lib) by crafting GET requests containing ".." sequences. The provided description does n...