Cerberus FTP Server Security Bypass Vulnerability

Bugtraq ID:	66322
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 11 2014 12:00AM
Updated:	Mar 11 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Cerberus FTP Server 5.0.5 Cerberus FTP Server 4.0.3 0 Cerberus FTP Server 4.0.2 2 Cerberus FTP Server 3.0.6 Cerberus FTP Server 3.0.3 Cerberus FTP Server 3.0.2 Cerberus FTP Server 3.0.1 Cerberus FTP Server 2.32 Cerberus FTP Server 2.1 Cerberus FTP Server 1.71 Cerberus FTP Server 6.0.6.1 Cerberus FTP Server 5.0.6.0 Cerberus FTP Server 5.0.5.1 Cerberus FTP Server 5.0.5.0 Cerberus FTP Server 5.0.4.3 Cerberus FTP Server 2.46 Cerberus FTP Server 2.45
Not Vulnerable:	Cerberus FTP Server 6.0.7

Cerberus FTP Server Security Bypass Vulnerability

Cerberus FTP Server is prone to a security-bypass vulnerability.

An attacker may leverage this issue to bypass certain security restrictions and gain unauthorized access.

Cerberus FTP Server Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cerberus FTP Server Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cerberus FTP Server Security Bypass Vulnerability

References:

• Cerberus FTP Homepage (Cerberus)
  
• Cerberus FTP Server Release Notes (Cerberus)