CVE-2006-5950

The CVE concerns ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier). The vulnerability allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, likely due to response messages. Impact is noted as Partial confidentiality; no exploits...

CVE-2006-5949

CVE-2006-5949 describes a directory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier) . The issue allows remote attackers to exploit MKD requests to create arbitrary directories via directory traversal sequences. The description notes the vulnerability details ...