WS_FTP Server FTP Commands Buffer Overflow Vulnerabilities
- 0
- Add a Comment
- No Related Post
CRITICAL:
Highly criticalIMPACT:
System accessWHERE:
From remoteSOFTWARE:
WS_FTP Server 5.x, WS_FTP Server 4.x, WS_FTP Server 3.xReed Arvin has discovered some vulnerabilities in WS_FTP Server, which can be exploited by malicious users to compromise a vulnerable system.
The vulnerabilities are caused due to boundary errors within the handling of the “SITE”, “XMKD”, “MKD”, and “RNFR” commands. This can be exploited to cause a buffer overflow by supplying an overly long argument (about 768 bytes).
Successful exploitation allows execution of arbitrary code.
The vulnerabilities have been confirmed in version 5.03. Other versions may also be affected.
NOTE: Exploit code has been published.
Solution:
Grant only trusted users access to a vulnerable server.Filter overly long arguments in a FTP proxy.