OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Knud Erik Højgaard (knud_at_skodliv.dk)
Date: Thu Oct 10 2002 - 07:55:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    version tested: 2.24
    pwd shows absolute path instead of relative ( ie. drive:/folder instead of
    / )
    ls ../ will let a user get a dirlisting above his home directory.
    mkdir ../folder will let a user create folders outside his home
    directory.[1]
    put file ../file will let users create files outside his home directory.[1]
    get ../file will let users get files outside his home directory.

    Furthermore the passwords are stored in cleartext in ftpserver.ini located
    in the installation directory, defaults to drive:\progra~1\powerftp

    [1] Requires write access, duh. get the ftpserver.ini and look for a user
    with AcessRight1=1. 

    --
Knud Erik Højgaard