XM Easy Personal FTP Server Password Buffer Overflow Vulnerability

Bugtraq ID:	18711
Class:	Boundary Condition Error
CVE:	CVE-2006-2226
Remote:	Yes
Local:	No
Published:	Jun 28 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Jerome Athias is credited with the discovery of this vulnerability.
Vulnerable:	XM Easy Personal FTP Server 5.0.1 XM Easy Personal FTP Server 5.2.1
Not Vulnerable:

XM Easy Personal FTP Server Password Buffer Overflow Vulnerability

XM Easy Personal FTP Server is prone to a buffer-overflow vulnerability. A buffer may be overrun with attacker-supplied data.

Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the ftp server application. Failed exploit attempts will likely crash applications, denying service to legitimate users.

XM Easy Personal FTP Server Password Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/18777.pl

XM Easy Personal FTP Server Password Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

XM Easy Personal FTP Server Password Buffer Overflow Vulnerability

References:

• XM Easy Personal FTP Server (Jerome Athias)
  
• XM Easy Personal FTP Server Homepage (dxmsoft)