Forum Index
Home Forum Radio Memberlist Help Search Quick Links

It appears you have not yet registered with our community which limits what you can do & see. It's Free To register, please click here.



Forum Index » Internet » Security Alerts and vulnerabilities » Internet Explorer FTP Download Directory Traversal
Register Calendar Gallery Mark Forums Read

Security Alerts and vulnerabilities Lets keep abreast on the latest threats by posting those findings here..

Reply
 
Thread Tools Display Modes
  #1  
Old 01-04-2005, 12:20 AM
Mobo's Avatar
Mobo Mobo is offline
Thinking outside the box
  
Join Date: Sep 2004
Location: Cape Breton
Posts: 4,587
Send a message via ICQ to Mobo Send a message via AIM to Mobo Send a message via MSN to Mobo Send a message via Yahoo to Mobo Send a message via Skype™ to Mobo
The vulnerability is caused due to an input validation error in the handling of FTP file transfers. This can be exploited by a malicious FTP server to create files in arbitrary locations via directory traversal attacks by tricking a user into downloading malicious files (e.g. by dragging or copying a file or folder).

The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 and Microsoft Windows 2000 SP4 / XP SP1.

Solution:
The vulnerability does not affect systems running Windows XP with SP2 installed.

Do not download files from untrusted FTP servers.
Reply With Quote
Posted


Reply

  • Submit Thread to Digg Digg
  • Submit Thread to del.icio.us del.icio.us
  • Submit Thread to StumbleUpon StumbleUpon
  • Submit Thread to Google Google
    • Bookmarks

    « Previous Thread | Next Thread »
    Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
     
    Thread Tools
    Display Modes
    Linear Mode Linear Mode

    Posting Rules
    You may not post new threads
    You may not post replies
    You may not post attachments
    You may not edit your posts
    BB code is On
    Smilies are On
    [IMG] code is On
    HTML code is Off
    Forum Jump

    Similar Threads
    Thread Thread Starter Forum Replies Last Post
    hijack log der Spyware / Virus Removal 46 10-04-2005 07:49 AM
    Internet Explorer Wallpaper Mobo Customizing | 2000 | XP | VISTA 0 05-24-2005 11:42 AM
    eliteuvf32.exe?? AdWare? Alex Spyware / Virus Removal 31 05-17-2005 09:50 PM
    Pop-up crazy MOJET Spyware / Virus Removal 11 03-30-2005 09:22 PM
    Internet Explorer HTML Elements Buffer Overflow Mobo Security Alerts and vulnerabilities 0 12-06-2004 11:32 AM



    All times are GMT -5. The time now is 11:33 AM.

    Contact Us - CyberAnswers - Archive - Privacy Statement - Top

    Firefox 2