RaidenFTPD 'MLST' Command Remote Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	31741
Class:	Boundary Condition Error
CVE:	CVE-2008-6186
Remote:	Yes
Local:	No
Published:	Oct 13 2008 12:00AM
Updated:	May 07 2015 05:22PM
Credit:	dmnt
Vulnerable:	Raiden Professional Servers RaidenFTPD 2.4 3620 Raiden Professional Servers RaidenFTPD 2.4 .2241 Raiden Professional Servers RaidenFTPD 2.4 .2240
Not Vulnerable:

RaidenFTPD 'MLST' Command Remote Stack Based Buffer Overflow Vulnerability

RaidenFTPD is prone to a remote stack-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

RaidenFTPD 2.4 build 3620 is vulnerable; other versions may also be affected.

RaidenFTPD 'MLST' Command Remote Stack Based Buffer Overflow Vulnerability

Attackers may use readily available network utilities to exploit this issue.

The following exploit is available:

• /data/vulnerabilities/exploits/31741.py

RaidenFTPD 'MLST' Command Remote Stack Based Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RaidenFTPD 'MLST' Command Remote Stack Based Buffer Overflow Vulnerability

References:

• RaidenFTPD Homepage (Raiden Professional Servers)