Crob FTP Server Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	13848
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2005 12:00AM
Updated:	Dec 14 2006 04:18PM
Credit:	Leon Juranic <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Crob Crob FTP Server 3.6.1
Not Vulnerable:

Crob FTP Server Remote Heap Buffer Overflow Vulnerability

Crob FTP Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input data prior to copying it to an insufficiently sized memory buffer.

This vulnerability allows remote attackers to overwrite critical memory control structures, possibly altering the affected application's normal flow of execution. Attackers may exploit this to execute arbitrary machine code in the context of the affected server process.

This issue is present in version 3.6.1; previous versions may also be affected.

Crob FTP Server Remote Heap Buffer Overflow Vulnerability

The following exploits are available to demonstrate this issue:

• /data/vulnerabilities/exploits/crob_RMD_overflow.c
• /data/vulnerabilities/exploits/13848.py

Crob FTP Server Remote Heap Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Crob FTP Server Remote Heap Buffer Overflow Vulnerability

References:

• Crob FTP Server (Crob )
  
• LSS Security Advisory #LSS-2005-06-06 (LSS Security)