PT-2002-1402 · Galacticomm · Galacticomm Worldgroup Ftp Server

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Galacticomm Worldgroup FTP server versions 3.20 and earlier

Description The issue allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. characters.

Recommendations For Galacticomm Worldgroup FTP server versions 3.20 and earlier, consider disabling the LIST command functionality until a patch is available to prevent potential exploitation. Restrict access to the FTP server to minimize the risk of denial of service or arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2002-0336

Produtos afetados

Galacticomm Worldgroup Ftp Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/21305 · Exploit
• 🔥 http://securityfocus.com/bid/4185 · Exploit
• http://iss.net/security_center/static/8297.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0336 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101484128203523&w=2 · Nota