Signature Detail
Short Name |
FTP:DIRECTORY:MSIE-FTP-DIRTRAV |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
FTP |
Keywords |
microsoft ftp internet explorer MS05-044 |
Release Date |
2005/01/05 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+ |
FTP: Internet Explorer FTP Handler Directory Traversal
This signature detects a Microsoft Internet Explorer client attempting to download a file from a malicious server. The server can embed a directory traversal attack in the filename to specify the exact file download location on the client machine.
Extended Description
Successful exploitation of the vulnerability could allow an attacker to inject malicious files on a victim machine, in an arbitrary directory.
References
- CVE: CVE-2005-2126
- CVE: CVE-2004-1376
- URL: http://secunia.com/advisories/13704