Re: Problems with various windows FTP servers

From: Stephen Cope (mail@unsolicited.kimihia.org.nz)
Date: 05/28/02 

Date: Tue, 28 May 2002 22:13:01 +1200
From: Stephen Cope <mail@unsolicited.kimihia.org.nz>
To: bugtraq@securityfocus.com

I discovered a few days ago that FileZilla[0] up to 0.7.0 is vulnerable
to listing files outside the root directory by using "..". The author
fixed the problem immediately and has released version 0.7.1.

http://sf.net/projects/filezilla/

SnakeByte, your download link has the / facing the wrong way.

> it reports the problem [ www.kryptocrew.de/snakebyte/bed.html ]. 

-- 
Stephen Cope - http://sdc.org.nz/