PT-2005-4397 · Ftgate · Ftgate4

Luca Ercoli · Publicado 2005-11-16 · Atualizado 2017-07-11 · CVE-2005-3640

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FTGate4 version 4.1

Description The issue concerns multiple buffer overflows in the IMAP Groupware Mail server of FTGate4. Remote attackers can execute arbitrary code by providing long arguments to various IMAP commands. This has been demonstrated using the EXAMINE command.

Recommendations For FTGate4 version 4.1, update to a version that addresses the buffer overflow issues in the IMAP Groupware Mail server to prevent remote code execution.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2005-3640

Produtos afetados

Ftgate4

Referências · 9

• 🔥 https://exploit-db.com/exploits/1327 · Exploit
• 🔥 http://lucaercoli.it/advs/FTGate4.txt · Exploit
• 🔥 http://securityfocus.com/bid/15449 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3640 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23101 · Nota
• http://secunia.com/advisories/17609 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2005-11/0213.html · Nota
• http://osvdb.org/20917 · Nota
• http://vupen.com/english/advisories/2005/2478 · Aviso do Fabricante