PT-2008-2322 · South River Technologies · Titan Ftp Server

Securfrog · Published 2008-02-12 · Updated 2018-10-15 · CVE-2008-0702

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Titan FTP Server versions 6.03 through 6.0.5.549

Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can be achieved by sending a long argument to either the USER or PASS command. The potential impact includes causing a denial of service, such as crashing or hanging the daemon, and possibly allowing the execution of arbitrary code.

Recommendations For Titan FTP Server versions 6.03 through 6.0.5.549, consider restricting access to the USER and PASS commands until a patch is available. As a temporary workaround, limit the length of arguments accepted by these commands to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0702

Affected Products

Titan Ftp Server

References · 7

• 🔥 https://exploit-db.com/exploits/5036 · Exploit
• http://secunia.com/advisories/28760 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0702 · Security Note
• http://securityfocus.com/bid/27568 · Note
• http://securityreason.com/securityalert/3639 · Note
• http://vupen.com/english/advisories/2008/0393 · Note
• http://securityfocus.com/archive/1/487431/100/0/threaded · Note