Home FTP Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user- supplied input. Exploiting this issue allows an authenticated user to create directories outside the FTP root directory, which may lead to other attacks. Home FTP Server 1.10.1.139 is vulnerable other versions may also be affected.

• http://www.securityfocus.com/archive/1/507932
• http://www.securityfocus.com/bid/37041

---

Updated on 2017-03-28