CVE-2004-2747

Publication date

2007-11-08 20:00:00

Family

mitre

State

PUBLISHED

Description

Directory traversal vulnerability in Pablo Software Solutions Quick n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not.