Perception LiteServe 'USER' FTP Command Remote Buffer Overflow Vulnerability

Bugtraq ID:	33158
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 07 2009 12:00AM
Updated:	Jan 08 2009 05:42PM
Credit:	HouSSaMix
Vulnerable:	Perception LiteServe 2.2 Perception LiteServe 2.0.1 Perception LiteServe 2.0 2 Perception LiteServe 2.0 Perception LiteServe 2.81
Not Vulnerable:

Perception LiteServe 'USER' FTP Command Remote Buffer Overflow Vulnerability

Perception LiteServe is prone to a remote buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

LiteServe 2.81 is vulnerable; other versions may also be affected.

Perception LiteServe 'USER' FTP Command Remote Buffer Overflow Vulnerability

Attackers may use readily available network utilities to exploit this issue.

The following exploit is available:

• /data/vulnerabilities/exploits/33158.pl

Perception LiteServe 'USER' FTP Command Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Perception LiteServe 'USER' FTP Command Remote Buffer Overflow Vulnerability

References:

• LiteServe Product Page (Perception)