Crob FTP Server Remote RMD Command Stack Buffer Overflow Vulnerability

Bugtraq ID:	13847
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2005 12:00AM
Updated:	Jun 03 2005 12:00AM
Credit:	Leon Juranic <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Crob Crob FTP Server 3.6.1
Not Vulnerable:

Crob FTP Server Remote RMD Command Stack Buffer Overflow Vulnerability

Crob FTP Server is susceptible to a remote stack buffer overflow vulnerability when handling the RMD FTP command. This issue is due to a failure of the application to properly bounds check user-supplied input data prior to copying it to an insufficiently-sized memory buffer.

This vulnerability allows remote attackers to overwrite critical memory regions, resulting in the alteration of the normal flow of execution of the affected application. Attackers may exploit this to execute arbitrary machine code in the context of the affected server process.

This issue is present in version 3.6.1. Previous versions may also be affected.

Crob FTP Server Remote RMD Command Stack Buffer Overflow Vulnerability

A proof of concept exploit is available:

• /data/vulnerabilities/exploits/crob_RMD_overflow.c

Crob FTP Server Remote RMD Command Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Crob FTP Server Remote RMD Command Stack Buffer Overflow Vulnerability

References:

• Crob FTP Server (Crob )
  
• LSS Security Advisory #LSS-2005-06-06 (LSS Security)