PT-2008-2322 · South River Technologies · Titan Ftp Server

Securfrog · Publicado 2008-02-12 · Atualizado 2018-10-15 · CVE-2008-0702

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Titan FTP Server versions 6.03 through 6.0.5.549

Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can be achieved by sending a long argument to either the USER or PASS command. The potential impact includes causing a denial of service, such as crashing or hanging the daemon, and possibly allowing the execution of arbitrary code.

Recommendations For Titan FTP Server versions 6.03 through 6.0.5.549, consider restricting access to the USER and PASS commands until a patch is available. As a temporary workaround, limit the length of arguments accepted by these commands to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0702

Produtos afetados

Titan Ftp Server

Referências · 7

• 🔥 https://exploit-db.com/exploits/5036 · Exploit
• http://securityfocus.com/bid/27568 · Nota
• http://securityreason.com/securityalert/3639 · Nota
• http://vupen.com/english/advisories/2008/0393 · Nota
• http://secunia.com/advisories/28760 · Aviso do Fabricante
• http://securityfocus.com/archive/1/487431/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0702 · Nota de Segurança