PT-2003-1713 · Igloo · Iglooftp Pro

Peter Winter-Smith · Published 2003-07-15 · Updated 2016-10-18 · CVE-2003-0561

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IglooFTP PRO version 3.8

Description: The issue is related to multiple buffer overflows that can be triggered by remote FTP servers. This can occur through a long FTP banner or long responses to certain client commands, including USER, PASS, and ACCT, potentially allowing remote FTP servers to execute arbitrary code.

Recommendations: For IglooFTP PRO version 3.8, consider disabling the FTP client functionality until a patch is available to prevent potential exploitation. Restrict access to the FTP server to minimize the risk of arbitrary code execution. Avoid using the USER, PASS, and ACCT commands in the affected version until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2003-0561

Affected Products

Iglooftp Pro

References · 6

• 🔥 https://exploit-db.com/exploits/22871 · Exploit
• 🔥 https://exploit-db.com/exploits/22872 · Exploit
• 🔥 https://exploit-db.com/exploits/22891 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0561 · Security Note
• http://marc.info/?l=bugtraq&m=105769805311484&w=2 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0010.html · Note