Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable other versions may also be affected.

An update is available please see the references for more information.

• http://www.securityfocus.com/archive/1/512192
• http://www.xlightftpd.com/index.htm
• http://www.xlightftpd.com/whatsnew.htm
• https://www.securityfocus.com/bid/41399

---

Updated on 2015-03-25