uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities
BID:38102
Info
uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 38102 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2010 12:00AM |
| Updated: | Jun 02 2011 06:00AM |
| Credit: | loneferret |
| Vulnerable: |
uplusware UplusFtp 1.7 .12 easy ftp server easy ftp server 1.7 2 easy ftp server easy ftp server 1.7.0.11 |
| Not Vulnerable: | |
Discussion
uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities
UplusFtp (formerly Easy Ftp Server) is prone to multiple remote buffer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
UplusFtp 1.7.0.12 is vulnerable; prior versions, including Easy Ftp Server, may also be affected.
UplusFtp (formerly Easy Ftp Server) is prone to multiple remote buffer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
UplusFtp 1.7.0.12 is vulnerable; prior versions, including Easy Ftp Server, may also be affected.
Exploit / POC
uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploits and proofs of concept are available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploits and proofs of concept are available:
- /data/vulnerabilities/exploits/38102.py
- /data/vulnerabilities/exploits/38262-1.py
- /data/vulnerabilities/exploits/38262-2.py
- /data/vulnerabilities/exploits/38262-3.py
- /data/vulnerabilities/exploits/38262-4.py
- /data/vulnerabilities/exploits/38102.rb
- /data/vulnerabilities/exploits/38102.sh
- /data/vulnerabilities/exploits/38102-2.py
- /data/vulnerabilities/exploits/38102-3.py
- /data/vulnerabilities/exploits/38102-5.py
Solution / Fix
uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- Easy FTP Server Project Page (SourceForge)
- Repair UplusFtp 1.7.0.12 memory leak (meishu)
- UplusFtp Homepage (uplusware)