PT-2014-2859 · Pcman · Pcman Ftp Server

Published 2014-05-15 · Updated 2016-12-31 · CVE-2013-4730

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PCMan's FTP Server version 2.0.7

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a long string in a USER command.

Recommendations For PCMan's FTP Server version 2.0.7, consider updating to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the FTP server to minimize the risk of exploitation. Avoid using long strings in the USER command until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-4730

Affected Products

Pcman Ftp Server

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/pcman_stor.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/pcman_put.rb · Exploit
• 🔥 http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html · Exploit
• 🔥 https://exploit-db.com/exploits/31255 · Exploit
• 🔥 https://exploit-db.com/exploits/28328 · Exploit
• 🔥 https://exploit-db.com/exploits/38013 · Exploit
• 🔥 https://exploit-db.com/exploits/27007 · Exploit
• 🔥 https://exploit-db.com/exploits/31789 · Exploit
• 🔥 https://exploit-db.com/exploits/36078 · Exploit
• 🔥 https://exploit-db.com/exploits/31254 · Exploit
• 🔥 https://exploit-db.com/exploits/27703 · Exploit
• 🔥 https://exploit-db.com/exploits/26471 · Exploit
• 🔥 https://exploit-db.com/exploits/27277 · Exploit
• 🔥 https://exploit-db.com/exploits/26495 · Exploit
• 🔥 http://exploit-db.com/exploits/26471 · Exploit