Ari Pikivirta: >> Home Ftp Server >> 1.0.7_b45 Security Vulnerabilities
Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:\" (Windows drive letter) sequences in commands such as (1) LIST or (2) RETR.
CVSS Score
5.0
EPSS Score
0.022
Published
2005-08-30
Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst.
CVSS Score
5.0
EPSS Score
0.004
Published
2005-08-30