FTPLocate Remote Command Execution Vulnerability

Bugtraq ID:	14367
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 25 2005 12:00AM
Updated:	Jul 25 2005 12:00AM
Credit:	Discovery is credited to newbug Tseng <[email protected]>.
Vulnerable:	Chung-Kie Tung FtpLocate 2.0 2 Chung-Kie Tung FtpLocate 2.0 1 Chung-Kie Tung FtpLocate 2.0 0 Chung-Kie Tung FtpLocate 1.5
Not Vulnerable:

FTPLocate Remote Command Execution Vulnerability

FtpLocate is prone to a remote arbitrary command execution vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data.

An attacker can supply arbitrary commands and have them executed in the context of the server.

This issue may facilitate unauthorized remote access to the computer running the hosting Web server.

FTPLocate Remote Command Execution Vulnerability

An exploit is not required.

A proof of concept exploit has been provided:

• /data/vulnerabilities/exploits/ftplocate.pl

FTPLocate Remote Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

FTPLocate Remote Command Execution Vulnerability

References:

• FtpLocate Home Page (Chung-Kie Tung)
  
• Chroot Security Group Advisory 2005-07-25 -- ftplocate ([email protected])