Bug 149110 - CAN-2005-0372 directory traversal issue in gftp
Summary: CAN-2005-0372 directory traversal issue in gftp
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: gftp
Version: 3
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: David Zeuthen
QA Contact: Mike McLean
URL:
Whiteboard: impact=moderate,public=20050214,sourc...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-02-18 20:08 UTC by Josh Bressers
Modified: 2013-03-06 03:42 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-04-08 19:06:50 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Josh Bressers 2005-02-18 20:08:28 UTC 
*** This bug has been split off bug 149109 ***

------- Original comment by Josh Bressers (Security Response Team) on 2005.02.18
15:05 -------

gftp versions 2.0.18 and before have a directory traversal issue.  This issue
was reported to bugtraq in 2004, but it was not discovered in gftp until recently.

Please see:
http://www.securityfocus.com/archive/1/385882/2004-12-01/2004-12-31/0

The fix for this issue is attachment 111215 [details]
Comment 1 Josh Bressers 2005-02-18 20:10:13 UTC 
This issue should also affect FC2.
Comment 4 David Zeuthen 2005-04-08 19:06:50 UTC 
Fixed for both FC2 and FC3
Note You need to log in before you can comment on or make changes to this bug.