PT-2009-5776 · Globalscape · Cuteftp

Published 2009-09-30 · Updated 2017-08-17 · CVE-2009-3483

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CuteFTP versions 8.3.3 through 8.3.3.0054

Description The issue is related to a heap-based buffer overflow in the Create New Site feature, which can be triggered by a site list containing an entry with a long label. This can cause a denial of service due to memory corruption or potentially allow the execution of arbitrary code.

Recommendations For versions 8.3.3 through 8.3.3.0054, consider disabling the Create New Site feature until a patch is available to prevent potential exploitation. Restrict the creation of new sites with long labels to minimize the risk of memory corruption or arbitrary code execution.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3483

Affected Products

Cuteftp

References · 5

• 🔥 http://packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-3483 · Security Note
• http://secunia.com/advisories/36874 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53487 · Note
• http://osvdb.org/58387 · Note