Test ID:	1.3.6.1.4.1.25623.1.0.10471
Category:	FTP
Title:	Guild FTPd tells if a given file exists
Summary:	NOSUMMARY
Description:	Description: The remote FTP server can be used to determine if a given file exists on the remote host or not, by adding dot-dot-slashes in front of them. For instance, it is possible to determine the presence of \autoexec.bat by requesting ../../../../autoexec.bat An attacker may use this flaw to gain more knowledge about this host, such as its file layout. This flaw is specially useful when used with other vulnerabilities. Solution : Contact your vendor for the latest software release. Risk factor : Low
Cross-Ref:	BugTraq ID: 1452 Common Vulnerability Exposure (CVE) ID: CVE-2000-0640 http://www.securityfocus.com/bid/1452 Bugtraq: 20000708 gnu-pop3d (FTGate problem), Savant Webserver, Guild FTPd (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html http://www.osvdb.org/573 XForce ISS Database: guild-ftpd-disclosure(4922) https://exchange.xforce.ibmcloud.com/vulnerabilities/4922
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.