PT-2014-2070 · Warftp · War Ftp Daemon

Corelanc0D3R · Published 2014-04-01 · Updated 2014-04-01 · CVE-2009-5141

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions War FTP Daemon version 1.82 RC 12

Description The issue allows remote authenticated users to cause a denial of service, resulting in a crash, by utilizing format string specifiers in a LIST command.

Recommendations For War FTP Daemon version 1.82 RC 12, consider restricting access to the LIST command until a patch is available to prevent potential denial of service attacks.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2009-5141

Affected Products

War Ftp Daemon

References · 7

• 🔥 https://corelan.be/index.php/forum/security-advisories-archive-2009/corelan-09001-warftpd-1-82-rc12-dos · Exploit
• 🔥 http://exploit-db.com/exploits/9622 · Exploit
• 🔥 https://exploit-db.com/exploits/9622 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-5141 · Security Note
• http://warftp.org/index.php?menu=338&cmd=show_article&article_id=1003 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2009-09/0105.html · Note
• http://osvdb.org/62599 · Note