PT-2016-5116 · Globespanvirata · Globespanvirata Ftpd

Déborah Valeria Higa · Published 2016-02-15 · Updated 2016-03-22 · CVE-2016-2314

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GlobespanVirata ftpd version 1.0

Description The issue allows remote authenticated users to cause a denial of service, resulting in a device outage. This can be achieved by using the FTP MKD command to create a directory with a long name, and then using certain other commands.

Recommendations For GlobespanVirata ftpd version 1.0, consider restricting access to the MKD command as a temporary workaround to minimize the risk of exploitation. Additionally, restrict the length of directory names that can be created via the FTP MKD command to prevent the creation of directories with long names.

Exploit

Fix

Weakness Enumeration

CWE-17

Related Identifiers

CVE-2016-2314

Affected Products

Globespanvirata Ftpd

References · 3

• 🔥 https://debihiga.wordpress.com/sa-ftp · Exploit
• https://osv.dev/vulnerability/CVE-2016-2314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2314 · Security Note