EdBrowse FTP Directory Listing Remote Buffer Overflow Vulnerability

Bugtraq ID:	21832
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 01 2007 12:00AM
Updated:	Jan 04 2007 06:28PM
Credit:	This issue was reported by [email protected].
Vulnerable:	Karl Dahlke Edbrowse 3.1.3
Not Vulnerable:

EdBrowse FTP Directory Listing Remote Buffer Overflow Vulnerability

Edbrowse is prone to a remote buffer-overflow vulnerability.

The issue arises when the client handles excessive string data. By exploiting this issue, a remote attacker may gain unauthorized access in the context of the user running the application.

Edbrowse 3.1.3 is vulnerable to this issue; other versions may also be affected.

EdBrowse FTP Directory Listing Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

EdBrowse FTP Directory Listing Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

EdBrowse FTP Directory Listing Remote Buffer Overflow Vulnerability

References:

• [ 1622117 ] security: buffer overflow when parsing FTP dir listing (Anonymous)
  
• Edbrowse Home Page (Karl Dahlke)