This host is installed with AutoFTP Manager FTP Client and is prone to directory traversal vulnerability.

Successful exploitation will allow attackers to write files into a user's Startup folder to execute malicious code when the user logs on. Impact Level: Application.

Upgrade AutoFTP Manager FTP Client to recent versions, For updates refer to http://www.deskshare.com/download.aspx

The flaw exists due to error in handling of certain crafted file names. It does not properly sanitise filenames containing directory traversal sequences that are received from an FTP server.

AutoFTP Manager FTP Client 4.31(4.3.1.0) and prior.

• http://en.securitylab.ru/nvd/396970.php
• http://www.htbridge.ch/advisory/directory_traversal_in_autoftp_manager.html

---

Updated on 2015-03-25