CVE-2013-3922 Information

Description

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..2f (encoded dot dot slash) in a GET request.

Reference

https://exchange.xforce.ibmcloud.com/vulnerabilities/89161 https://www.trustwave.com/spiderlabs/advisories/TWSL2013-032.txt