Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack.
| Software | From | Fixed in |
|---|---|---|
| texas_imperial_software / wftpd | 2.41_rc14 | 2.41_rc14.x |
| texas_imperial_software / wftpd | 3.0 | 3.0.x |