BID:15486

FreeFTPD Multiple Buffer Overflow Vulnerabilities

Info

FreeFTPD Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	15486
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 17 2005 12:00AM
Updated:	Nov 17 2005 12:00AM
Credit:	barabas mutsonline <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	freeFTPd freeFTPd 1.0.8 freeFTPd freeFTPd 1.0.7 freeFTPd freeFTPd 1.0.6 freeFTPd freeFTPd 1.0.5 freeFTPd freeFTPd 1.0.4 freeFTPd freeFTPd 1.0.3 freeFTPd freeFTPd 1.0.2 freeFTPd freeFTPd 1.0.1 freeFTPd freeFTPd 1.0

Not Vulnerable:	freeFTPd freeFTPd 1.0.10

Discussion

FreeFTPD Multiple Buffer Overflow Vulnerabilities

freeFTPd is prone to multiple buffer overflow vulnerabilities. These issues are due to a failure in the application to do proper bounds checking on user-supplied data before storing it in finite sized buffers.

An attacker can exploit these issues to crash the server, denying service to legitimate users. Arbitrary code execution with SYSTEM privileges may also be possible.

Exploit / POC

FreeFTPD Multiple Buffer Overflow Vulnerabilities

The following exploit was released:

/data/vulnerabilities/exploits/XH-freeFTPD_remote_bof.c

Solution / Fix

FreeFTPD Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has released an updated version addressing this and other issues. Users should contact the vendor for further information.

freeFTPd freeFTPd 1.0