PT-2006-7178 · Golden · Golden Ftp Server

Cd1Zz + 3 · Published 2006-12-15 · Updated 2021-03-16 · CVE-2006-6576

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Golden FTP Server versions 1.92 through 4.70

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and possibly execute arbitrary code via a long PASS command.

Recommendations For Golden FTP Server versions 1.92 through 4.70, consider updating to a version that is not affected by this issue, as a temporary workaround, restrict access to the PASS command to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2006-6576

Affected Products

Golden Ftp Server

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/goldenftp_pass_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/49629 · Exploit
• 🔥 https://exploit-db.com/exploits/16036 · Exploit
• 🔥 https://exploit-db.com/exploits/17355 · Exploit
• 🔥 http://packetstormsecurity.com/files/161711/Golden-FTP-Server-4.70-Buffer-Overflow.html · Exploit
• 🔥 http://exploit-db.com/exploits/16036 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6576 · Security Note
• http://secunia.com/advisories/23323 · Note
• http://vupen.com/english/advisories/2006/4936 · Note
• http://securityfocus.com/bid/45957 · Note
• http://retrogod.altervista.org/golden_heap.html · Note
• http://securityfocus.com/bid/45924 · Note