Ipswitch WS_FTP PASV Response Remote Buffer Overflow Vulnerability

Bugtraq ID:	20121
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 20 2006 12:00AM
Updated:	Jan 15 2007 05:30PM
Credit:	Discovery of this issue is credited to h07.
Vulnerable:	Ipswitch WS FTP Server 5.08
Not Vulnerable:

Ipswitch WS_FTP PASV Response Remote Buffer Overflow Vulnerability

A remote buffer-overflow vulnerability is reported in the Ipswitch WS_FTP client. This issue occurs because the application fails to properly validate the length of user-supplied strings prior to copying them into finite process buffers.

An attacker may exploit this issue to cause the affected client to crash. Execution of arbitrary code in the context of the FTP client process may also be possible.

Version 5.08 of the affected software is vulnerable; other versions may be affected as well.

Ipswitch WS_FTP PASV Response Remote Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/ws_ftp-5.0.8-PASV-rce.c

Ipswitch WS_FTP PASV Response Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Ipswitch WS_FTP PASV Response Remote Buffer Overflow Vulnerability

References:

• WS FTP Homepage (IpSwitch)