PT-2006-4591 · Filecopa · Filecopa Ftp Server

Published 2006-07-19 · Updated 2017-07-20 · CVE-2006-3726

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FileCOPA FTP Server versions prior to 1.01

Description The issue allows remote authenticated attackers to execute arbitrary code via a long argument to the "LIST command".

Recommendations For versions prior to 1.01, update to version 1.01 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2006-3726

Affected Products

Filecopa Ftp Server

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/filecopa_list_overflow.rb · Exploit
• 🔥 http://appsec.ch/docs/2006-07-19-fileCopa.txt · Exploit
• 🔥 https://exploit-db.com/exploits/16733 · Exploit
• 🔥 https://exploit-db.com/exploits/3107 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3726 · Security Note
• http://secunia.com/advisories/21108 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27817 · Note
• http://securityfocus.com/bid/19065 · Note
• http://vupen.com/english/advisories/2006/2870 · Note
• http://osvdb.org/27389 · Note