Floosietek FTGate Web File Access...

- AV AC AU C I A
发布: 1999-05-25
修订: 2018-10-17

A vulnerability in Floosietek's FTGate allows remote malicious users to steal local files. Floosietek's FTGate is a Win32 mail server program. One of its features is allowing administrators to check the status of the mail server using a web browser via a built-in web server. The web server fails to check whether requested files fall outside its document tree (by using ".." in the URL). Thus attackers can retrieve files in the same drives as that on which the software resides if they know or can get it's filename.

0%
当前有1条漏洞利用/PoC
产品及版本信息(CPE)暂不可用