ftp.pl vulnerability

[@ (zillion @ safemode)]

Feartech ftp browser problem

> From the creators page ( http://www.feartech.com/vv/ftp.shtml )

-- snip --

FTP Browser allows you to display a html enhanced directory listing,
which is great for managing your ftp files. FTP
Browser can do all of the following:

-- snip --

But wait.. it can do more than just that :

http://www.server.com/cgi-bin/ftp/ftp.pl?dir=../../../../../../etc

The vedor has been notified a week ago but has released no fix or update

This ain't something huge but the script is offered on various script
archives.

zillion

site: http://www.safemode.org
email: zillion () safemode org