PT-2014-2577 · Warftp · War Ftp Daemon

Published 2014-04-01 · Updated 2014-04-01 · CVE-2013-2278

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions War FTP Daemon version 1.82

Description The issue is related to an unspecified vulnerability that can cause a denial of service (crash) and possibly allow the execution of arbitrary code. This is related to log messages and the internal log handler to the Windows Event log.

Recommendations For War FTP Daemon version 1.82, consider disabling the internal log handler to the Windows Event log as a temporary workaround until a patch is available. Restrict access to the log messages to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2013-2278

Affected Products

War Ftp Daemon

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-2278 · Security Note
• http://warftp.org/index.php?cmd=show_article&article_id=1035 · Vendor Advisory
• http://securityfocus.com/archive/1/525830 · Note