WarFTPD WDM.EXE Remote Buffer Overflow Vulnerability

Bugtraq ID:	17803
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 02 2006 12:00AM
Updated:	May 08 2006 10:24PM
Credit:	Discovery is credited to Infigo.
Vulnerable:	War FTP Daemon War FTP Daemon 1.82 RC9 War FTP Daemon War FTP Daemon 1.82 RC10 War FTP Daemon War FTP Daemon 1.8
Not Vulnerable:

WarFTPD WDM.EXE Remote Buffer Overflow Vulnerability

WarFTPD is prone to a buffer-overflow vulnerability.

Reportedly, passing excessive data may overflow a finite-sized internal memory buffer. A successful attack may result in memory corruption as memory adjacent to the buffer is overwritten with user-supplied data.

This issue may lead to a denial-of-service condition or the execution of arbitrary code.

The specific versions of WarFTPd vulnerable to this issue are not currently known. Presumably, this issue affects the latest release of the affected software, and possibly earlier versions.

WarFTPD WDM.EXE Remote Buffer Overflow Vulnerability

This issue can be triggered by uisng the Infigo FTPStress Fuzzer.

WarFTPD WDM.EXE Remote Buffer Overflow Vulnerability

Solution:

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

WarFTPD WDM.EXE Remote Buffer Overflow Vulnerability

References:

• Infigo FTPStress Fuzzer (Infigo)
  
• Vendor Homepage (War FTP Daemon)
  
• INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities ("infocus" )