Ziv Kamir has reported a vulnerability in Nexgen FTP Server, allowing malicious people to gain knowledge of sensitive information.

The problem is that arguments passed to certain commands aren't properly verified. This can be exploited to access files outside the FTP root using the classical directory traversal character sequence "../".

The vulnerability affects Nexgen FTP Server and possible other FTP servers build using Nexgen Server SDK.

Solution
The vulnerability has been fixed in the latest versions.
Further details available in Customer Area

Provided and/or discovered by
Ziv Kamir

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area