CoreFTP Server FTP / SFTP Server 2 Build 674 MDTM Directory Traversal
Posted by deepcore on March 13, 2019 – 8:15 pm
CoreFTP Server FTP and SFTP Server version 2 build 674 suffer from a directory traversal vulnerability. By utilizing a directory traversal along with the FTP MDTM command, an attacker can browse outside the root directory to determine if a file exists based on return file size along with the date the file was last modified by using a …. technique.
Post a reply
You must be logged in to post a comment.