Steve, I agree that both: iFTPAddU and iFTPAddH resemble administrator-level controls. Moreover, they are administrator-level controls. But, as ZARAZA said, the problem still remains. The successful exploitation of the issues might result in privilege escalation, therefore I called the aforementioned issues - the vulnerabilities. kind rgds, michal "jest" be.
Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.