PT-2005-5236 · Ftgate · Ftgate

Published 2005-12-29 · Updated 2011-03-08 · CVE-2005-4568

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FTGate versions 4.4.000

Description The issue allows remote attackers to execute arbitrary code via format string specifiers in the USER, PASS, and TOP commands to the POP3 server, and the LIST and AUTHENTICATE commands to the IMAP server.

Recommendations For FTGate version 4.4.000, consider disabling the vulnerable commands (USER, PASS, TOP, LIST, AUTHENTICATE) to the POP3 and IMAP servers until a patch is available. Restrict access to these commands to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-4568

Affected Products

Ftgate

References · 5

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1017.html · Exploit
• 🔥 http://securityfocus.com/bid/15972 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1019.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4568 · Security Note
• http://vupen.com/english/advisories/2005/3010 · Note