PT-2016-5116 · Globespanvirata · Globespanvirata Ftpd

Déborah Valeria Higa · Publicado 2016-02-15 · Atualizado 2016-03-22 · CVE-2016-2314

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GlobespanVirata ftpd version 1.0

Description The issue allows remote authenticated users to cause a denial of service, resulting in a device outage. This can be achieved by using the FTP MKD command to create a directory with a long name, and then using certain other commands.

Recommendations For GlobespanVirata ftpd version 1.0, consider restricting access to the MKD command as a temporary workaround to minimize the risk of exploitation. Additionally, restrict the length of directory names that can be created via the FTP MKD command to prevent the creation of directories with long names.

Exploit

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

CVE-2016-2314

Produtos afetados

Globespanvirata Ftpd

Referências · 3

• 🔥 https://debihiga.wordpress.com/sa-ftp · Exploit
• https://osv.dev/vulnerability/CVE-2016-2314 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2314 · Nota de Segurança