Mabry Software FTPServer/X Controls Unspecified Buffer Overflow Vulnerability
BID:9403
Info
Mabry Software FTPServer/X Controls Unspecified Buffer Overflow Vulnerability
| Bugtraq ID: | 9403 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 12 2004 12:00AM |
| Updated: | Jan 12 2004 12:00AM |
| Credit: | The disclosure of this issue has been credited to securma massine <[email protected]>. |
| Vulnerable: |
Mollensoft Software Hyperion FTP Server 3.5.3 Mabry Software FTPServer/X 1.0 .05 |
| Not Vulnerable: | |
Discussion
Mabry Software FTPServer/X Controls Unspecified Buffer Overflow Vulnerability
It has been reported that FTPServer/X may be prone to an unspecified remote denial of service vulnerability that may allow an attacker to to gain unauthorized access to a system. The issue may be related to the 'mkdir' command. An attacker may send a malformed 'mkdir' command containing excessive data to a vulnerable server. Immediate consequences of an attack may result in a denial of service condition.
FTPServer/X COM Object version 1.00.050 has been reported to be vulnerable to this issue, however, other versions could be affected as well. It should be noted that any software that implements the Mabry Software FTPServer/X control, is likely affected by this vulnerability. It has been confirmed that this control is in use by Mollensoft(Hyperion) FTP Server.
It has been reported that FTPServer/X may be prone to an unspecified remote denial of service vulnerability that may allow an attacker to to gain unauthorized access to a system. The issue may be related to the 'mkdir' command. An attacker may send a malformed 'mkdir' command containing excessive data to a vulnerable server. Immediate consequences of an attack may result in a denial of service condition.
FTPServer/X COM Object version 1.00.050 has been reported to be vulnerable to this issue, however, other versions could be affected as well. It should be noted that any software that implements the Mabry Software FTPServer/X control, is likely affected by this vulnerability. It has been confirmed that this control is in use by Mollensoft(Hyperion) FTP Server.
Exploit / POC
Mabry Software FTPServer/X Controls Unspecified Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Mabry Software FTPServer/X Controls Unspecified Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Mabry Software FTPServer/X Controls Unspecified Buffer Overflow Vulnerability
References:
References: