Titan FTP Server CWD Command Remote Heap Overflow Vulnerability

Bugtraq ID:	11069
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 30 2004 12:00AM
Updated:	Aug 30 2004 12:00AM
Credit:	This issue was disclosed by lion <[email protected]>.
Vulnerable:	South River Technologies Titan FTP Server 3.21 South River Technologies Titan FTP Server 3.10 South River Technologies Titan FTP Server 3.0 1 South River Technologies Titan FTP Server 2.10 South River Technologies Titan FTP Server 2.2
Not Vulnerable:	South River Technologies Titan FTP Server 3.30

Titan FTP Server CWD Command Remote Heap Overflow Vulnerability

Titan FTP server is reported prone to a remote heap overflow vulnerability. This issue exists due to insufficient boundary checks performed by the application and may result in arbitrary code execution.

The issue presents itself when the server processes user-supplied data passed through the 'cwd' command.

All versions of Titan FTP server are considered vulnerable to this issue.

Titan FTP Server CWD Command Remote Heap Overflow Vulnerability

Exploit code is available:

• /data/vulnerabilities/exploits/titan_hof.c

Titan FTP Server CWD Command Remote Heap Overflow Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue. Please visit the referenced vendor web site for more information on obtaining the update.

Titan FTP Server CWD Command Remote Heap Overflow Vulnerability

References:

• Titan FTP Release Notes (South River Technologies)
  
• Titan FTP Server Homepage (South River Technologies)
  
• TiTan FTP Server Long Command Heap Overflow PoC Exploit (CNHonker)
  
• Titan FTP Server Long Command Heap Overflow Vulnerability ("lion" )