Re: EFTP directory traversal

From: H D Moore (hdmat_private)
Date: Sun Dec 16 2001 - 22:38:24 PST

Next message: Michel Arboi: "Re: EFTP directory traversal"

Previous message: Michel Arboi: "EFTP directory traversal"
In reply to: Michel Arboi: "EFTP directory traversal"
Next in thread: Michel Arboi: "Re: EFTP directory traversal"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Friday 14 December 2001 05:00 am, Michel Arboi wrote:
> Going on with the mailbox flush...
> This bug is very similar to teh "Guild FTP" directory traversal, which
> was already tested by Nessus.

This plugin only works if the FTP Root is on the C drive, which is usually 
not the case with FTP servers (people like to put all their juarez on a 
different partition). What about checking the banner if the retrieval of 
autoexec.bat doesnt work?

Next message: Michel Arboi: "Re: EFTP directory traversal"
Previous message: Michel Arboi: "EFTP directory traversal"
In reply to: Michel Arboi: "EFTP directory traversal"
Next in thread: Michel Arboi: "Re: EFTP directory traversal"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Dec 16 2001 - 22:38:44 PST