Matu FTP Server Buffer Overflow Vulnerability

Bugtraq ID:	4792
Class:	Boundary Condition Error
CVE:	CVE-2002-0895
Remote:	Yes
Local:	No
Published:	May 22 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Discovered by Kanatoko <[email protected]>.
Vulnerable:	Matu Matu FTP 1.13 - Microsoft Windows 95 - Microsoft Windows 98
Not Vulnerable:	Matu Matu FTP 1.14

Matu FTP Server Buffer Overflow Vulnerability

Matu FTP Server is a freely available FTP server for Microsoft Windows 95 and 98 operating systems.

Matu FTP Server is vulnerable to a buffer overflow condition.

It is possible for a malicious user to craft a request that will result in code execution on the vulnerable system.

This issue has been reported in Matu FTP Server 1.13. Other versions may also be affected.

Matu FTP Server Buffer Overflow Vulnerability

Kanatoko <[email protected]> has provided the following proof of concept:

• /data/vulnerabilities/exploits/matuftpWin98.pl

Matu FTP Server Buffer Overflow Vulnerability

Solution:
This issue has been addressed in version 1.14.


Matu Matu FTP 1.13

• Matu mftps114.exe
  http://www.matusoft.com/software/mftps114.exe

Matu FTP Server Buffer Overflow Vulnerability

References:

• Matu FTP Homepage (Matu)