IBM Information for VU#210409

Multiple FTP clients contain directory traversal vulnerabilities

Status

Not Affected

Vendor Statement

IBM's AIX ftp client is not vulnerable to the directory traversal attacks described in CERT Vulnerability Note VU#210409. These attacks require a connection to a malicious ftp server. The AIX ftp client specifies the files that are written to during a ftp session; it does not get this information from the server it is connected to. An attempt by a malicious server to specify a file to be written to will fail.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

The CERT/CC has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.