PT-2014-2577 · Warftp · War Ftp Daemon

Publicado 2014-04-01 · Atualizado 2014-04-01 · CVE-2013-2278

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions War FTP Daemon version 1.82

Description The issue is related to an unspecified vulnerability that can cause a denial of service (crash) and possibly allow the execution of arbitrary code. This is related to log messages and the internal log handler to the Windows Event log.

Recommendations For War FTP Daemon version 1.82, consider disabling the internal log handler to the Windows Event log as a temporary workaround until a patch is available. Restrict access to the log messages to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2013-2278

Produtos afetados

War Ftp Daemon

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2278 · Nota de Segurança
• http://securityfocus.com/archive/1/525830 · Nota
• http://warftp.org/index.php?cmd=show_article&article_id=1035 · Aviso do Fabricante