HTTP: Virtual Vision FTP Directory Traversal
This signature detects access to the ftp.pl CGI script. Attackers can gain access to arbitrary files on the Web server.
Extended Description
The Virtual Visions FTP Browser is a CGI script that provides an HTML interface to files that you have available to download. By submitting a request to the script containing the special directory traversal characters it is possible to access any directory on the filesystem. For example: http://www.server.com/cgi-bin/ftp/ftp.pl?dir=../../../../../../etc
Affected Products
Virtual_vision ftp_browser
Short Name
HTTP:CGI:VIRTUAL-VISION-TRVRSL
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2000-0674 Directory FTP Traversal Virtual Vision bid:1471
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Virtual_vision
CVSS Score
5.0