CVE-2008-2795

The CVE refers to IDM Computer Solutions UltraEdit 14.00b where the FTP/SFTP client is vulnerable to directory traversal via a LIST response, enabling a remote server to create or overwrite arbitrary files using .. or ..\ sequences. Root cause is improper handling of directory components in the L...