netkit-ftp getreply() Uninitialized Output Stream Memory Corruption Vulnerability

Bugtraq ID:	26764
Class:	Design Error
CVE:	CVE-2007-5769
Remote:	Yes
Local:	No
Published:	Dec 07 2007 12:00AM
Updated:	Dec 10 2007 11:02PM
Credit:	Venustech AD_LAB reported this vulnerability.
Vulnerable:
Not Vulnerable:

netkit-ftp getreply() Uninitialized Output Stream Memory Corruption Vulnerability

The 'netkit-ftp' package is prone to a memory-corruption vulnerability because it performs an 'fclose()' call on an uninitialized output stream.

Successful attacks will cause denial-of-service conditions. Other attacks may also be possible.

This issue affects netkit-ftp 0.17; other versions may also be affected.

netkit-ftp getreply() Uninitialized Output Stream Memory Corruption Vulnerability

To exploit this issue an attacker must control a server and wait for victim users to connect.

netkit-ftp getreply() Uninitialized Output Stream Memory Corruption Vulnerability

Solution:
A patch is available that addresses this issue. Please see the references for more information.

netkit-ftp getreply() Uninitialized Output Stream Memory Corruption Vulnerability

References:

• [Full-disclosure] netkit-ftpd/ftp uninitialized vulnerability (xiaojunli.air)
  
• Netkit Homepage (Netkit)