icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

Golden FTP < 2.53 USER Traversal File Access

Medium

Synopsis

The remote host is vulnerable to a directory traversal flaw.

Description

The remote host is running the Golden FTP Server. This version of Golden FTP is vulnerable to a remote directory traversal flaw. An authenticated attacker can retrieve sensitive files from outside the FTP server directories by using a '../' type query.

Solution

Upgrade to version 2.53 or higher.