Tan Chew Keong has reported a vulnerability in net2ftp, which potentially can be exploited by malicious people to disclose sensitive information, delete certain files, and compromise a vulnerable system.

The vulnerability is caused due to an unspecified error and can be exploited to retrieve and potentially delete arbitrary files or to execute arbitrary PHP code in certain configurations.

The vulnerability is reported in versions 0.96 (stable) and 0.97 (beta). Prior versions may also be affected.

Solution
Update to version 0.97 (stable).

Provided and/or discovered by
Tan Chew Keong

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://vuln.sg/net2ftp096-en.html

Deep Links
Links available to Secunia VIM customers