Meteor FTP Server USER Memory Corruption Vulnerability

Bugtraq ID:	8376
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 08 2003 12:00AM
Updated:	Aug 08 2003 12:00AM
Credit:	Discovery is credited to Zee <[email protected]>. Auston J <[email protected]> provided further research.
Vulnerable:	MeteorSoft Meteor FTP 1.5 MeteorSoft Meteor FTP 1.2 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME
Not Vulnerable:

Meteor FTP Server USER Memory Corruption Vulnerability

Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server crash.

Further reports indicate that this may likely also be exploited to execute arbitrary code in the context of the affected server.

Meteor FTP Server USER Memory Corruption Vulnerability

The following proof-of-concept denial of service exploit was provided:

• /data/vulnerabilities/exploits/meteordos.pl

Meteor FTP Server USER Memory Corruption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Meteor FTP Server USER Memory Corruption Vulnerability

References:

• Meteor FTP Homepage (MeteorSoft)
  
• Meteor FTP Server v1.5 Buffer Overflow (Auston J )
  
• Remote denial of service vulnerability in Meteor FTP Version 1.5 (Zee )