Titan FTP Server USER/PASS Commands Buffer Overflow Vulnerability

Bugtraq ID:	27568
Class:	Boundary Condition Error
CVE:	CVE-2008-0702
Remote:	Yes
Local:	No
Published:	Feb 02 2008 12:00AM
Updated:	Apr 16 2015 06:06PM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	South River Technologies Titan FTP Server 3.30 South River Technologies Titan FTP Server 3.21 South River Technologies Titan FTP Server 3.10 South River Technologies Titan FTP Server 3.0 1 South River Technologies Titan FTP Server 2.10 South River Technologies Titan FTP Server 2.2
Not Vulnerable:

Titan FTP Server USER/PASS Commands Buffer Overflow Vulnerability

Titan FTP Server is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker may exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial of service.

We do not know which versions are affected at this time; we will update this BID as more information emerges.

Titan FTP Server USER/PASS Commands Buffer Overflow Vulnerability

The following proof-of-concept exploit is available:

• /data/vulnerabilities/exploits/27568.pl

Titan FTP Server USER/PASS Commands Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Titan FTP Server USER/PASS Commands Buffer Overflow Vulnerability

References:

• Titan FTP Server Homepage (South River Technologies)
  
• Titan FTP Server Remote Heap Overflow (USER/PASS) ([email protected])