ArGoSoft FTP Server XCWD Command Remote Buffer Overrun Vulnerability

Bugtraq ID:	8704
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 25 2003 12:00AM
Updated:	Sep 25 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to "Moran Zavdi" <[email protected]>.
Vulnerable:	ArGo Software Design FTP Server 1.4.1 .1
Not Vulnerable:	ArGo Software Design FTP Server 1.4.1 .2

ArGoSoft FTP Server XCWD Command Remote Buffer Overrun Vulnerability

A remote buffer overrun vulnerability has been discovered in ArGoSoft FTP Server. The vulnerability occurs due to insufficient bounds checking when handling data passed to the XCWD command. As a result, an attacker may be capable of overrunning sensitive process memory; potentially allowing for the execution of arbitrary code.

All code executed in this manner would be run with the privileges of the FTP server, possibly SYSTEM.

ArGoSoft FTP Server XCWD Command Remote Buffer Overrun Vulnerability

Solution:
ArGoSoft has addressed this version in FTP Server 1.4.1.2; users are advised to upgrade as soon as possible.


ArGo Software Design FTP Server 1.4.1 .1

• ArGoSoft FTP Server 1.4.1.2
  http://www.argosoft.com/applications/ftpserver/download.asp

ArGoSoft FTP Server XCWD Command Remote Buffer Overrun Vulnerability

References:

• ArGoSoft FTP Server Product Home Page (ArGoSoft)
  
• argosoft ftp server buffer overflow. ("Moran Zavdi" )