GlobalScape CuteFTP LIST Response Buffer Overflow Vulnerability

Bugtraq ID:	6642
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 18 2003 12:00AM
Updated:	Jan 18 2003 12:00AM
Credit:	Discovery of this vulnerability credited to "Lance Fitz-Herbert" <[email protected]>.
Vulnerable:	globalSCAPE CuteFTP 5.0
Not Vulnerable:	globalSCAPE CuteFTP 5.0.2 globalSCAPE CuteFTP 5.0.1

GlobalScape CuteFTP LIST Response Buffer Overflow Vulnerability

A buffer overflow condition has been reported for the CuteFTP application. The vulnerability is due to insufficient bounds checking performed on certain FTP command responses.

If CuteFTP is used to connect to a malicious FTP server that sends an overly long response to the LIST command, the buffer overflow condition will be triggered. Code execution may be possible.

** CuteFTP 5.0 build 51.1.23.1 was reported to still be vulnerable to this issue. For this build, 780 bytes of data are required to overflow the buffer rather than 257 bytes.

GlobalScape CuteFTP LIST Response Buffer Overflow Vulnerability

Solution:
The vendor has released an upgrade that addresses this issue. Users are advised to uninstall CuteFTP version 5.0.1, 5.0 or earlier and install CuteFTP version 5.0.2.

Fix available:


globalSCAPE CuteFTP 5.0

• globalSCAPE CuteFTP Version 5.0.2
  ftp://ftp.cuteftp.com/pub/cuteftp