An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote attacker can use a directory traversal (..\..\) to browse outside the root directory to determine the existence of a file on the operating system, and the last modified date.
02a55797ad317b26e2c3f852933ef7c93cfeefe8fa481fb85daa30044a0ac1f7