Accensus Security Group has discovered a vulnerability in Xlight FTP Server, which can be exploited by malicious users to disclose potentially sensitive information.

The vulnerability is caused due to the SFTP/SSH2 virtual server not properly verifying input before reading files. This can be exploited to disclose the contents of arbitrary files via directory traversal attacks.

NOTE: The FTP virtual server is not affected by this vulnerability.

The vulnerability is confirmed in version 3.5.0. Other versions may also be affected.

Solution
Update to version 3.6.0.

Provided and/or discovered by
Accensus Security Group

Changelog
Further details available to Secunia VIM customers

Original Advisory
Xlight:
http://www.xlightftpd.com/whatsnew.htm

Accensus Security Group:
http://archives.neohapsis.com/archives/bugtraq/2010-07/0034.html

Deep Links
Links available to Secunia VIM customers