At 01:39 PM 5/27/2002, SnakeByte / Eric Sesterhenn wrote: >Texas Imperial Software WFTPD > CWD ... > CWD .... > directory traversal possible From email received from SnakeByte out of band, it's clear that he's working on an extremely old version of WFTPD, downloaded from a web site that we are unfortunately unable to update due to errors in the automated update procedures at that web site. The bug he refers to has been reported to Bugtraq before, has been fixed, and has been reported fixed on Bugtraq before. The bug, if there is one, is that anything that is freely distributed is always available in old versions. Always, always, always go to the source of whatever software you use to at least check that you are running current software, even if you don't download from that source directly. Running extremely old software, as SnakeByte has shown, leaves you open to extremely old bugs. Alun. ~~~~ -- Texas Imperial Software | Try WFTPD, the Windows FTP Server. Find us at 1602 Harvest Moon Place | http://www.wftpd.com or email alun@texis.com Cedar Park TX 78613-1419 | VISA/MC accepted. NT-based sites, be sure to Fax/Voice +1(512)258-9858 | read details of WFTPD Pro for NT.
