FSPLIB Library Multiple Remote Vulnerabilities
BID:25034
Info
FSPLIB Library Multiple Remote Vulnerabilities
| Bugtraq ID: | 25034 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-3961 CVE-2007-3962 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2007 12:00AM |
| Updated: | Jan 22 2008 10:08PM |
| Credit: | Kalle Olavi Niemitalo is credited with the discovery of these issues. |
| Vulnerable: |
Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 gFTP gFTP 2.0.18 gFTP gFTP 2.0.17 gFTP gFTP 2.0.16 gFTP gFTP 2.0.15 gFTP gFTP 2.0.15 gFTP gFTP 2.0.14 gFTP gFTP 2.0.13 gFTP gFTP 2.0.12 gFTP gFTP 2.0.11 gFTP gFTP 2.0.10 gFTP gFTP 2.0.9 gFTP gFTP 2.0.8 gFTP gFTP 2.0.7 gFTP gFTP 2.0.6 a gFTP gFTP 2.0.6 gFTP gFTP 2.0.5 gFTP gFTP 2.0.4 gFTP gFTP 2.0.3 gFTP gFTP 2.0.2 gFTP gFTP 2.0.1 gFTP gFTP 2.0 Gentoo Linux FSP FSPLIB 0.8 FSP FSPLIB 0.7 FSP FSPLIB 0.6 FSP FSPLIB 0.5 FSP FSPLIB 0.4 FSP FSPLIB 0.3 FSP FSPLIB 0.2 FSP FSPLIB 0.1 |
| Not Vulnerable: |
FSP FSPLIB 0.9 |
Discussion
FSPLIB Library Multiple Remote Vulnerabilities
FSPLIB library is prone to multiple remote vulnerabilities.
An attacker can exploit these issues to execute arbitrary code in the context of an application using the library. Failed attacks will likely cause denial-of-service conditions.
Versions prior to FSPLIB 0.9 are vulnerable.
FSPLIB library is prone to multiple remote vulnerabilities.
An attacker can exploit these issues to execute arbitrary code in the context of an application using the library. Failed attacks will likely cause denial-of-service conditions.
Versions prior to FSPLIB 0.9 are vulnerable.
Exploit / POC
FSPLIB Library Multiple Remote Vulnerabilities
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
FSPLIB Library Multiple Remote Vulnerabilities
Solution:
The vendor released FSPLIB 0.9 to address these issues. Please see the references for more information.
FSP FSPLIB 0.4
FSP FSPLIB 0.7
FSP FSPLIB 0.5
FSP FSPLIB 0.2
FSP FSPLIB 0.6
FSP FSPLIB 0.1
FSP FSPLIB 0.8
FSP FSPLIB 0.3
Solution:
The vendor released FSPLIB 0.9 to address these issues. Please see the references for more information.
FSP FSPLIB 0.4
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.7
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.5
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.2
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.6
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.1
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.8
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
FSP FSPLIB 0.3
-
FSP fsplib-0.9.tar.gz
http://downloads.sourceforge.net/fsp/fsplib-0.9.tar.gz?modtime=1185193 861&big_mirror=0
References
FSPLIB Library Multiple Remote Vulnerabilities
References:
References:
- /fsplib/ChangeLog (FSP)
- gFTP Home Page (gFTP)
- Homepage (FSP)