CVE-2008-2821
Glub Tech Secure FTP < 2.5.15 - Path Traversal via FTP LIST Response
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-2821. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Glub Tech Secure FTP 2.5.15. By sending a malformed LIST command with excessive backslashes, an attacker can write arbitrary files outside the intended directory.
Description
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in a response to a LIST command, a related issue to CVE-2002-1345.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Glub Tech Secure FTP 2.5.15. By sending a malformed LIST command with excessive backslashes, an attacker can write arbitrary files outside the intended directory.