PT-2002-1402 · Galacticomm · Galacticomm Worldgroup Ftp Server

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Galacticomm Worldgroup FTP server versions 3.20 and earlier

Description The issue allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. characters.

Recommendations For Galacticomm Worldgroup FTP server versions 3.20 and earlier, consider disabling the LIST command functionality until a patch is available to prevent potential exploitation. Restrict access to the FTP server to minimize the risk of denial of service or arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2002-0336

Affected Products

Galacticomm Worldgroup Ftp Server

References · 5

• 🔥 https://exploit-db.com/exploits/21305 · Exploit
• 🔥 http://securityfocus.com/bid/4185 · Exploit
• http://iss.net/security_center/static/8297.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0336 · Security Note
• http://marc.info/?l=bugtraq&m=101484128203523&w=2 · Note