Signature Detail
Short Name |
HTTP:CGI:VIRTUAL-VISION-TRVRSL |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
Virtual Vision FTP Directory Traversal |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Virtual Vision FTP Directory Traversal
This signature detects access to the ftp.pl CGI script. Attackers can gain access to arbitrary files on the Web server.
Extended Description
The Virtual Visions FTP Browser is a CGI script that provides an HTML interface to files that you have available to download. By submitting a request to the script containing the special directory traversal characters it is possible to access any directory on the filesystem. For example: http://www.server.com/cgi-bin/ftp/ftp.pl?dir=../../../../../../etc
Affected Products
- Virtual Vision FTP Browser 1.0.0
References
- BugTraq: 1471
- CVE: CVE-2000-0674