CVE-2006-0319

Farmers WIFE 4.4 SP1 includes an FTP server (port 22003/tcp) vulnerable to directory traversal. A remote attacker can trigger .. sequence in commands such as PUT or SIZE to create arbitrary files outside the FTP root. The Nessus plugin notes the service runs with SYSTEM privileges on Windows. No ...