EFTP Buffer Overflow Code Execution and Denial of Service Vulnerability

Bugtraq ID:	3330
Class:	Boundary Condition Error
CVE:	CVE-2001-1112
Remote:	Yes
Local:	No
Published:	Sep 12 2001 12:00AM
Updated:	Jul 11 2009 07:56AM
Credit:	This vulnerability was posted to BugTraq by ByteRage <[email protected]>.
Vulnerable:	Khamil Landross and Zack Jones EFTP 2.0.7 .337 + Cisco iCDN 2.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

EFTP Buffer Overflow Code Execution and Denial of Service Vulnerability

Encrypted FTP (EFTP) is both an FTP client and server application for Windows platforms.

A malicious user with upload permissions to the target host can cause a buffer overflow in EFTP to execute code of the attacker's choosing. The attacker can potentially use this exploit to open a bindshell on the target host. Another possible result of this exploit is a denial of service.

EFTP Buffer Overflow Code Execution and Denial of Service Vulnerability

The following exploit code was provided by ByteRage <[email protected]>

• /data/vulnerabilities/exploits/ex_eftpd.c

EFTP Buffer Overflow Code Execution and Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

EFTP Buffer Overflow Code Execution and Denial of Service Vulnerability

References:

• EFTP Main Page (Khamil Landross and Zack Jones)