Blackmoon FTP 'Port' Command Buffer Overflow Vulnerability
BID:45814
Info
Blackmoon FTP 'Port' Command Buffer Overflow Vulnerability
| Bugtraq ID: | 45814 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-0507 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 14 2011 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Craig Freyman |
| Vulnerable: |
BlackMoon FTP Server 3.1 Release 6 |
| Not Vulnerable: | |
Discussion
Blackmoon FTP 'Port' Command Buffer Overflow Vulnerability
Blackmoon FTP is prone to a buffer-overflow vulnerability.
Successful exploits may allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service condition.
Blackmoon FTP version 3.1 Release 6 is vulnerable; other versions may also be affected.
Blackmoon FTP is prone to a buffer-overflow vulnerability.
Successful exploits may allow attackers to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service condition.
Blackmoon FTP version 3.1 Release 6 is vulnerable; other versions may also be affected.
Exploit / POC
Blackmoon FTP 'Port' Command Buffer Overflow Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Blackmoon FTP 'Port' Command Buffer Overflow Vulnerability
Solution:
Reports indicate updates are available to address this issue. This has not been confirmed.
Solution:
Reports indicate updates are available to address this issue. This has not been confirmed.
References
Blackmoon FTP 'Port' Command Buffer Overflow Vulnerability
References:
References:
- BlackMoon FTP Homepage (BlackMoon)