PT-2014-2070 · Warftp · War Ftp Daemon

Corelanc0D3R · Publicado 2014-04-01 · Atualizado 2014-04-01 · CVE-2009-5141

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions War FTP Daemon version 1.82 RC 12

Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash, by utilizing format string specifiers in a LIST command.

Recommendations For War FTP Daemon version 1.82 RC 12, consider restricting access to the LIST command until a patch is available to prevent potential denial of service attacks.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2009-5141

Produtos afetados

War Ftp Daemon

Referências · 7

• 🔥 https://corelan.be/index.php/forum/security-advisories-archive-2009/corelan-09001-warftpd-1-82-rc12-dos · Exploit
• 🔥 http://exploit-db.com/exploits/9622 · Exploit
• 🔥 https://exploit-db.com/exploits/9622 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2009-09/0105.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-5141 · Nota de Segurança
• http://osvdb.org/62599 · Nota
• http://warftp.org/index.php?menu=338&cmd=show_article&article_id=1003 · Aviso do Fabricante