Directory Traversal Vulnerability in Pablo FTP Server by Pablo Software Solutions

CVE-2002-1054

What is CVE-2002-1054?

The Pablo FTP Server, specifically versions 1.0 build 9 and earlier, contains a directory traversal vulnerability that can potentially be exploited by remote authenticated users. By crafting specific LIST commands that include the '..' (dot-dot backslash) sequence, an attacker can gain unauthorized access to arbitrary directories, compromising the integrity and confidentiality of the data stored on the server. This vulnerability underscores the critical need for proper input validation and access control measures in FTP servers.

References