Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
FTP:OVERFLOW:FREE-FTPD-PASS |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
FTP |
Keywords |
freeFTPd PASS Command Buffer Overflow |
Release Date |
2013/10/09 |
Update Number |
2309 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
FTP: freeFTPd PASS Command Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the freeFTPd. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Buffer overflow in War FTP allows remote execution of commands.
Affected Products
- Jgaa warftpd up to 1.66
- Microsoft windows_95
- Microsoft windows_nt
References
- BugTraq: 61905
- BugTraq: 8375
- BugTraq: 19243
- BugTraq: 10078
- CVE: CVE-2006-3952
- CVE: CVE-2003-0727
- CVE: CVE-1999-0256
- URL: http://www.blackhat.com/presentations/bh-usa-03/bh-us-03-litchfield-paper.pdf