This is a writeup describing a directory traversal vulnerability in iFTPStorage for iPhone/iPod touch. It explains how an attacker can download arbitrary files by traversing directories via the FTP server.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:iFTPStorage for iPhone / iPod touch <= 1.3
No auth needed
Prerequisites:Network access to the vulnerable FTP server on the iPhone/iPod touch