PT-2013-5170 · Netwin · Surgeftp

Publicado 2013-08-09 · Atualizado 2017-08-29 · CVE-2013-4742

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SurgeFTP versions prior to 23d2

Description The issue is caused by a buffer overflow that occurs when a long string is sent within the authentication request, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code.

Recommendations For versions prior to 23d2, update to version 23d2 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-4742

Produtos afetados

Surgeftp

Referências · 6

• http://securityfocus.com/bid/61403 · Nota
• http://osvdb.org/95582 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85922 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2013-07/0149.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4742 · Nota de Segurança
• http://secunia.com/advisories/54188 · Aviso do Fabricante