Hyperion FTP Server MKDIR Buffer Overflow Vulnerability

Bugtraq ID:	7278
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 04 2003 12:00AM
Updated:	Apr 04 2003 12:00AM
Credit:	Discovery is credited to "[email protected]" <[email protected]>.
Vulnerable:	Mollensoft Software Hyperion FTP Server 3.0 Mollensoft Software Hyperion FTP Server 2.8.11 Mollensoft Software Hyperion FTP Server 2.7
Not Vulnerable:

Hyperion FTP Server MKDIR Buffer Overflow Vulnerability

Hyperion FTP Server is prone to a remotely exploitable buffer overflow condition. This is due to insufficient bounds checking of FTP 'mkdir' commands. It may be possible to exploit this vulnerability to execute malicious instructions in the context of the FTP server.

This issue may be related to BID 6467.

Hyperion FTP Server MKDIR Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hyperion FTP Server MKDIR Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hyperion FTP Server MKDIR Buffer Overflow Vulnerability

References:

• Home Page (Mollensoft Software)
  
• TA-2003-03 Buffer Overflow Vulnerability in Hyperion FTP Server 3.0 ("[email protected]" )