SmallFTPD < 1.0.3 CWD Command Traversal Directory Listing

medium Nessus Network Monitor Plugin ID 1824

Synopsis

The remote host is vulnerable to a flaw which allows attackers to retrieve sensitive files or data.

Description

The remote FTP server (smallftpd) is vulnerable to a flaw which allows users to access files outside of the FTP server root.

Solution

Upgrade to version 1.0.3 or higher.

Plugin Details

Severity: Medium

ID: 1824

Family: FTP Servers

Published: 8/20/2004

Updated: 3/6/2019

Reference Information

BID: 7473