As discussed in my previous JavaWorld article “Java FTP Client Libraries Reviewed” (April 2003), FTP support in the JDK does not fully implement the FTP specification (Request for Comments 959). For ...

The Java and Python runtimes fail to properly validate FTP URLs, which can potentially allow attackers to punch holes through firewalls to access local networks. On Saturday, security researcher ...