qftp Set_Umask Function Stack-Based Buffer-Overflow Vulnerability

Bugtraq ID:	22986
Class:	Boundary Condition Error
CVE:	CVE-2007-1485
Remote:	No
Local:	Yes
Published:	Mar 15 2007 12:00AM
Updated:	May 12 2015 07:33PM
Credit:	This issue was disclosed by starcadi.
Vulnerable:	ftplib ftplib 3.1-1
Not Vulnerable:

qftp Set_Umask Function Stack-Based Buffer-Overflow Vulnerability

The 'qftp' utility is prone to a stack-based buffer-overflow vulnerability because it fails to properly check boundaries on user-supplied data before copying it to an insufficiently sized buffer.

Exploiting this issue could lead to denial-of-service conditions and to the execution of arbitrary machine code in the context of the application.

Version 3.1-1 of the 'ftplib' library is affected; other versions may also be vulnerable.

qftp Set_Umask Function Stack-Based Buffer-Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

qftp Set_Umask Function Stack-Based Buffer-Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

qftp Set_Umask Function Stack-Based Buffer-Overflow Vulnerability

References:

• ftplib Web Site (ftplib)