PT-2005-5236 · Ftgate · Ftgate

Publicado 2005-12-29 · Atualizado 2011-03-08 · CVE-2005-4568

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FTGate versions 4.4.000

Description The issue allows remote attackers to execute arbitrary code via format string specifiers in the USER, PASS, and TOP commands to the POP3 server, and the LIST and AUTHENTICATE commands to the IMAP server.

Recommendations For FTGate version 4.4.000, consider disabling the vulnerable commands (USER, PASS, TOP, LIST, AUTHENTICATE) to the POP3 and IMAP servers until a patch is available. Restrict access to these commands to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-4568

Produtos afetados

Ftgate

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1017.html · Exploit
• 🔥 http://securityfocus.com/bid/15972 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1019.html · Exploit
• http://vupen.com/english/advisories/2005/3010 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4568 · Nota de Segurança