iOS iFTPStorage 1.3 - Directory Traversal

Author: XEL
type: remote
platform: ios
port: 
date_added: 2010-12-03 
date_updated: 2010-12-03 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url: http://www.exploit-db.com/screenshots/idlt16000/passwd-ios.png 
application_url: 

#############################################
###    					  ###
##		     _x3l		   ##
#	http://gahor-krisztian.hu/xel	    #
##	    xel@gahor-krisztian.hu	   ##
###					  ###
#############################################


# Exploit: iFTPStorage for iPhone / iPod touch <= 1.3 - Directory Traversal
# Date: 02/12/2010
# Author: _x3l
# Software Link: http://itunes.apple.com/us/app/iftpstorage/id333357690?mt=8
# Version: 1.3
# Tested on: iPhone 3GS with 4.2.1 firmware

There is directory traversal vulnerability in the iFTPStorage.
You can download all file from the iPhone when you connected to the ftp server.
	For example: GET ../../../../../../etc/passwd