PT-2014-2859 · Pcman · Pcman Ftp Server

Publicado 2014-05-15 · Atualizado 2016-12-31 · CVE-2013-4730

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PCMan's FTP Server version 2.0.7

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a long string in a USER command.

Recommendations For PCMan's FTP Server version 2.0.7, consider updating to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the FTP server to minimize the risk of exploitation. Avoid using long strings in the USER command until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-4730

Produtos afetados

Pcman Ftp Server

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/pcman_stor.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/pcman_put.rb · Exploit
• 🔥 http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html · Exploit
• 🔥 https://exploit-db.com/exploits/31255 · Exploit
• 🔥 https://exploit-db.com/exploits/28328 · Exploit
• 🔥 https://exploit-db.com/exploits/38013 · Exploit
• 🔥 https://exploit-db.com/exploits/27007 · Exploit
• 🔥 https://exploit-db.com/exploits/31789 · Exploit
• 🔥 https://exploit-db.com/exploits/36078 · Exploit
• 🔥 https://exploit-db.com/exploits/31254 · Exploit
• 🔥 https://exploit-db.com/exploits/27703 · Exploit
• 🔥 https://exploit-db.com/exploits/26471 · Exploit
• 🔥 https://exploit-db.com/exploits/27277 · Exploit
• 🔥 https://exploit-db.com/exploits/26495 · Exploit
• 🔥 http://exploit-db.com/exploits/26471 · Exploit