HD Soft Windows FTP Server Username Format String Vulnerability
BID:9385
Info
HD Soft Windows FTP Server Username Format String Vulnerability
| Bugtraq ID: | 9385 |
| Class: | Input Validation Error |
| CVE: |
CVE-2004-0069 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2004 12:00AM |
| Updated: | Jul 12 2009 12:56AM |
| Credit: | The disclosure of this issue has been credited to Peter Winter-Smith <[email protected]>. |
| Vulnerable: |
HD Soft Windows FTP Server 1.6 HD Soft Windows FTP Server 1.5 |
| Not Vulnerable: | |
Discussion
HD Soft Windows FTP Server Username Format String Vulnerability
It has been reported that Windows FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client. The vulnerability presents itself when the server receives a malicious request containing embedded format string specifiers from a remote client when supplying a username during FTP authentication. This could be exploit to crash the server but could also theoretically permit corruption/disclosure of memory contents and execution of arbitrary code.
Windows FTP Server versions 1.6 and prior are reported to be prone to this issue.
It has been reported that Windows FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client. The vulnerability presents itself when the server receives a malicious request containing embedded format string specifiers from a remote client when supplying a username during FTP authentication. This could be exploit to crash the server but could also theoretically permit corruption/disclosure of memory contents and execution of arbitrary code.
Windows FTP Server versions 1.6 and prior are reported to be prone to this issue.
Exploit / POC
HD Soft Windows FTP Server Username Format String Vulnerability
Exploit contributed by mandragore.
Exploit contributed by mandragore.
Solution / Fix
HD Soft Windows FTP Server Username Format String Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
HD Soft Windows FTP Server Username Format String Vulnerability
References:
References:
- Windows Ftp Server SOFTWARE (HD Soft)
- Windows FTP Server Format String Vulnerability ("Peter Winter-Smith"