|
COMMAND ftp.pl SYSTEMS AFFECTED Feartech ftp PROBLEM zillion found following. FTP Browser allows you to display a html enhanced directory listing, which is great for managing your ftp files. FTP Browser can do all of the following: bla bla... But wait.. it can do more than just that: http://www.server.com/cgi-bin/ftp/ftp.pl?dir=../../../../../../etc The vedor has been notified a week ago but has released no fix or update. This ain't something huge but the script is offered on various script archives. SOLUTION Nothing yet.