Hispasec Lab Blog

July 2008

Links

Recent Entries

FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak(02/16 17:06)
Magellan Explorer 3.32 build 2305 Remote FTP Client Directory Traversal(09/06 20:02)
X-Diesel Unreal Commander v0.92 (build 573) multiple FTP-based vulnerabilities(09/06 19:49)
Total Commander 7.01 Remote FTP Client Directory Traversal(09/06 18:59)
Blizzard StarCraft Brood War 1.15.1 Remote DoS(08/29 14:22)
X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilities(08/23 13:37)
Fileinfo 2.0.9 multiple vulnerabilities(08/20 21:54)

Magellan Explorer 3.32 build 2305 Remote FTP Client Directory Traversal

[Advisories]

Enriva Development Magellan Explorer is an award winning Windows file explorer with a
built-in support for FTP protocol.

Magellan Explorer fails to correctly handle file names on remote FTP servers
while downloading them to a local drive. This may lead to a directory traversal
if a malformed file name contains relative path.
Successful exploitation may lead to a full scale system compromise.

Read more at:
/advisories/adv_MagellanExplorer_3_32_Remote_Traversal.txt

Sent by Gynvael Coldwind @ 20:02 | Permalink | Comments (0) | Trackbacks (0)

<< X-Diesel Unreal Commander v0.92 (build 573) multiple FTP-based vulnerabilities | Principal | FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak >>

Comentarios

There are no comments.

Trackbacks

Please send trackbacks to: http://blog.hispasec.nospam/lab/235/tbZ3ping
Replace "nospam" with "com"

There are no trackbacks.