Code-Crafters Ability Server FTP STOR And APPE Arguments Remote Buffer Overflow Vulnerability

Bugtraq ID:	11508
Class:	Boundary Condition Error
CVE:	CVE-2004-1627
Remote:	Yes
Local:	No
Published:	Oct 22 2004 12:00AM
Updated:	Jul 12 2009 08:06AM
Credit:	Exploit code was provided by [email protected] and Dark Eagle. The discoverer of this issue is currently unknown. Further information about the APPE command was provided by Justin Walpole.
Vulnerable:	Code-Crafters Ability Server 2.3.4 Code-Crafters Ability Server 2.3.2 Code-Crafters Ability Server 2.2.5
Not Vulnerable:

Code-Crafters Ability Server FTP STOR And APPE Arguments Remote Buffer Overflow Vulnerability

Ability Server is reported prone to a remote buffer overflow vulnerability. This issue affects the FTP component of the application and arises due to insufficient boundary checks performed by the FTP server.

A successful attack can result in memory corruption leading to a crash, however, if an attacker is able to overwrite sensitive memory addresses, they could execute code on a computer. Arbitrary code execution occurs in the context of the FTP process and may result in unauthorized access to the vulnerable computer.

Ability Server versions 2.34 and prior were identified to be vulnerable to this issue.

Code-Crafters Ability Server FTP STOR And APPE Arguments Remote Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/11508.rb
• /data/vulnerabilities/exploits/ability-2.34-ftp-stor.py
• /data/vulnerabilities/exploits/un-aftp.c

Code-Crafters Ability Server FTP STOR And APPE Arguments Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Code-Crafters Ability Server FTP STOR And APPE Arguments Remote Buffer Overflow Vulnerability

References:

• Ability Server (Code-Crafters)
  
• Ability FTP Server 2.34 Buffer Overflow Exploit ("Jérôme" ATHIAS )