PT-2015-3788 · Attachmate · Attachmate Reflection Ftp Client

Publicado 2015-01-21 · Atualizado 2015-01-28 · CVE-2014-5211

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Attachmate Reflection FTP Client versions prior to 14.1.433

Description The issue is related to a stack-based buffer overflow that can be triggered by a large PWD response from a remote FTP server, allowing the execution of arbitrary code.

Recommendations For versions prior to 14.1.433, update to version 14.1.433 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-5211

ZDI-15-008

Produtos afetados

Attachmate Reflection Ftp Client

Referências · 8

• http://zerodayinitiative.com/advisories/ZDI-15-008 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5211 · Nota de Segurança
• http://support.attachmate.com/techdocs/2502.html · Aviso do Fabricante
• http://support.attachmate.com/techdocs/2501.html · Aviso do Fabricante
• http://support.attachmate.com/techdocs/1708.html · Aviso do Fabricante
• http://secunia.com/advisories/62467 · Nota
• http://support.attachmate.com/techdocs/2288.html · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-15-008 · Nota de Segurança