NetSight
IP …
medium5.0

CVE-2002-1345

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user …

Impact

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.

Affected products

VendorProductAffected versions
Ncftp SoftwareNcftp
Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1.0
OpenbsdOpenbsd
Version 3.0
SunSolaris
Versions 2.6, 7.0
SunSunos
All versions
Version 5.7

References