Wing FTP Server Information Disclosure Vulnerabilities

Some vulnerabilities have been reported in Wing FTP Server, which can be exploited by malicious users and malicious people to disclose potentially sensitive information. 1) Input passed to the Web Client is not properly sanitised before being used. This can be exploited to access files outside of the user's home directory via directory traversal attacks. 2) An unspecified error when using the HTTP protocol can be exploited to disclose sensitive information. Solution Update to version 3.4.1. Further details available in Customer Area Provided and/or discovered by Reported by the vendor. Original Advisory http://www.wftpserver.com/serverhistory.htm