Cambridge Computer Corporation VxFtpSrv Remote Buffer Overflow Vulnerability

Bugtraq ID:	14839
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 15 2005 12:00AM
Updated:	Sep 15 2005 12:00AM
Credit:	Discovery is credited to Seth Fogie.
Vulnerable:	Cambridge Computer Corporation vxFtpSrv 0.9.7
Not Vulnerable:

Cambridge Computer Corporation VxFtpSrv Remote Buffer Overflow Vulnerability

vxFtpSrv is prone to a remote buffer overflow vulnerability.

A successful attack may trigger a crash in the server or lead to arbitrary code execution. The attacker may then gain unauthorized remote access in the context of the server application.

vxFtpSrv 0.9.7 is reported to be affected by this issue. Other versions may also be vulnerable.

Cambridge Computer Corporation VxFtpSrv Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cambridge Computer Corporation VxFtpSrv Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cambridge Computer Corporation VxFtpSrv Remote Buffer Overflow Vulnerability

References:

• vxFtpSrv Homepage (Cambridge Computer Corporation)
  
• Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 ([email protected])