This host is installed with FFFTP Client and is prone to directory traversal vulnerability.

Successful exploitation will allow remote attackers to create or overwrite arbitrary files on a vulnerable system by tricking a user into downloading a directory containing files. Impact Level: System

Upgrade to version 1.96d or later from, http://www2.biglobe.ne.jp/~sota/ffftp-e.html

The flaw is due to input validation error when processing FTP responses to a LIST command with a filename and is followed by ../ (dot dot forward-slash).

FFFTP version 1.96b and prior on Windows.

• http://secunia.com/advisories/30428/
• http://www.vupen.com/english/advisories/2008/1708/references

---

Updated on 2015-03-25