Total Commander 7.02 eliminates critical vulnerability

13th September 2007

A critical vulnerability has been found in Total Commander 7.02 possibly affecting previous versions of the popular file manager. Using the found error an attacker can download any files to a user's computer. The revealed vulnerability is situated in FTP client of the program and caused an expeditious release of an updated version of Total Commander 7.02, in which the error was eliminated. For Windows 3.1, simultaneously with 7.02, version 6.57 has been released, which corrects the error as well.
Total Commander is a file manager that offers the following features:
two file windows situated side by side;
multi-lingual support;
high search function;
comparing files and synchronizing directories;
Quick View option;
working with archives ZIP, ARJ, LZH, RAR, UC2, TAR, GZ, CAB, ACE and other;
built-in FTP client supporting FXP and HTTP;
Size: 2.1 MB