CVE-2008-2702

CVE-2008-2702 affects the FTP client in ESTsoft ALTools ALFTP (4.1 beta 2 and 5.0). The vulnerability is a directory traversal via .. in a LIST response, allowing a remote FTP server to create or overwrite arbitrary files on the affected system. The note explicitly mentions potential for code exe...

CVE-2012-0315

CVE-2012-0315 (ALFTP) – Affected software and cause : ESTsoft ALFtp prior to 5.31 is vulnerable to an untrusted search path issue that lets local users gain privileges by loading a Trojan horse executable (e.g., README.exe) when a user opens an extensionless file like README in the same directory...