Mollensoft Hyperion FTP/Enceladus Server Suite Multiple Remote Heap Corruption Vulnerabilities
BID:7909
Info
Mollensoft Hyperion FTP/Enceladus Server Suite Multiple Remote Heap Corruption Vulnerabilities
| Bugtraq ID: | 7909 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2003 12:00AM |
| Updated: | Jun 13 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to [email protected] |
| Vulnerable: |
Mollensoft Software Hyperion FTP Server 3.5.2 Mollensoft Software Enceladus Server Suite 3.9.11 |
| Not Vulnerable: | |
Discussion
Mollensoft Hyperion FTP/Enceladus Server Suite Multiple Remote Heap Corruption Vulnerabilities
Multiple vulnerabilities have been reported for Mollensoft Hyperion FTP/Enceladus Server Suite. The problem likely occurs due to insufficient bounds checking of user-supplied command parameters. As a result, by supplying excessive data to one of multiple FTP commands it is possible to corrupt heap-based memory.
This vulnerability could potentially be exploited by an attacker to execute arbitrary code with the privileges of the server process, possibly SYSTEM. A denial of service attack is also possible.
Multiple vulnerabilities have been reported for Mollensoft Hyperion FTP/Enceladus Server Suite. The problem likely occurs due to insufficient bounds checking of user-supplied command parameters. As a result, by supplying excessive data to one of multiple FTP commands it is possible to corrupt heap-based memory.
This vulnerability could potentially be exploited by an attacker to execute arbitrary code with the privileges of the server process, possibly SYSTEM. A denial of service attack is also possible.
Exploit / POC
Mollensoft Hyperion FTP/Enceladus Server Suite Multiple Remote Heap Corruption Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Mollensoft Hyperion FTP/Enceladus Server Suite Multiple Remote Heap Corruption Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Mollensoft Hyperion FTP/Enceladus Server Suite Multiple Remote Heap Corruption Vulnerabilities
References:
References: