RETIRED: Easy FTP Server Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	38262
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 16 2010 12:00AM
Updated:	Feb 23 2010 11:11PM
Credit:	loneferret
Vulnerable:	easy ftp server easy ftp server 1.7 2
Not Vulnerable:

RETIRED: Easy FTP Server Multiple Remote Buffer Overflow Vulnerabilities

Easy FTP Server is prone to multiple remote buffer-overflow vulnerabilities.

Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Easy FTP Server 1.7.0.2 is vulnerable; other versions may also be affected.

NOTE: This BID is being retired as a duplicate of BID 38102 (uplusware UplusFtp Multiple Remote Buffer Overflow Vulnerabilities).

RETIRED: Easy FTP Server Multiple Remote Buffer Overflow Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/38262-1.py
• /data/vulnerabilities/exploits/38262-2.py
• /data/vulnerabilities/exploits/38262-3.py
• /data/vulnerabilities/exploits/38262-4.py

RETIRED: Easy FTP Server Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Easy FTP Server Multiple Remote Buffer Overflow Vulnerabilities

References:

• Easy FTP Server Project Page (SourceForge)