WhitSoft Development SlimFTPd Remote Buffer Overflow Vulnerability

Bugtraq ID:	11645
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 10 2004 12:00AM
Updated:	Nov 10 2004 12:00AM
Credit:	Discovery of this issue is credited to "class 101" <[email protected]>.
Vulnerable:	WhitSoft SlimFTPd 3.15
Not Vulnerable:

WhitSoft Development SlimFTPd Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability affects WhitSoft Development SlimFTPd. This issue is due to a failure of the application to perform proper bounds checking on user-supplied strings prior to copying them into process buffers.

An attacker can leverage this issue to execute arbitrary machine code with the privileges of the affected FTP server, facilitating unauthorized access and privilege escalation.

WhitSoft Development SlimFTPd Remote Buffer Overflow Vulnerability

The following exploit has been made available:

• /data/vulnerabilities/exploits/slimFTPDCommandBObyclass101.c

WhitSoft Development SlimFTPd Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WhitSoft Development SlimFTPd Remote Buffer Overflow Vulnerability

References:

• SlimFTPd Home Page (WhitSoft Development)
  
• WhitSoft Homepage (WhitSoft Development)