The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
luke mewburn tnftp 2003-08-25 |