Test ID:	1.3.6.1.4.1.25623.1.0.11374
Category:	FTP
Title:	SunFTP directory traversal
Summary:	Directory traversal vulnerability in SunFTP build 9 allows; remote attackers to read arbitrary files via .. (dot dot) characters in various commands,; including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT.
Description:	Summary: Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0283 Bugtraq: 20010302 Sunftp build9(1) - ftp server Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html
Copyright	Copyright (C) 2003 Xue Yong Zhi

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.