PT-2005-2643 · Orenosv · Orenosv Http/Ftp Server

Published 2005-05-18 · Updated 2017-07-11 · CVE-2005-1666

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Orenosv HTTP/FTP Server version 0.8.1

Description The issue is related to multiple buffer overflows that can be triggered by remote authenticated users. This can lead to a denial of service, causing the server to crash, and potentially allow the execution of arbitrary code. The buffer overflows can occur when handling long arguments to certain FTP commands, such as MKD, RMD, or DELE, which are processed by functions like ftp xlate path, ftp is canonical, or os fn nativize. Additionally, a long SSI command processed by the parse cmd function in cgissi.exe can also trigger the issue.

Recommendations For Orenosv HTTP/FTP Server version 0.8.1, consider disabling the FTP commands MKD, RMD, and DELE, as well as restricting the use of SSI commands, until a patch is available. Avoid using long arguments with these commands to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1666

Affected Products

Orenosv Http/Ftp Server

References · 16

• 🔥 https://exploit-db.com/exploits/25629 · Exploit
• 🔥 http://securityfocus.com/bid/13546 · Exploit
• 🔥 http://security.org.sg/vuln/orenosv081.html · Exploit
• 🔥 http://securityfocus.com/bid/13549 · Exploit
• 🔥 https://exploit-db.com/exploits/25631 · Exploit
• 🔥 http://securiteam.com/windowsntfocus/5FP0H00FPS.html · Exploit
• http://securitytracker.com/id?1013923 · Patch
• http://secunia.com/advisories/15302 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1666 · Security Note
• http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20512 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1666 · Note
• http://osvdb.org/16165 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20510 · Note
• http://vupen.com/english/advisories/2005/0499 · Note