FreeFloat FTP Server USER Command Buffer Overflow
28Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 6.9epss 1.7%
de la publicación al arma0 días
Publicada en NVD5 ago
metasploit12 jun
probabilidad de explotación
1.7%top 25% de las CVE
explotación observada
noninguna fuente lo reporta
A stack-based buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0. The server fails to properly validate input passed to the USER command, allowing remote attackers to overwrite memory and potentially execute arbitrary code. The flaw is triggered by sending an overly long username string, which overflows the buffer allocated for user authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
FreeFloat · FTP ServerReferencias
https://my.saintcorporation.com/cgi-bin/exploit_info/freefloat_ftp_server_user_cmdhttps://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_user.rbhttps://web.archive.org/web/20101208040029/http://secunia.com/advisories/42465/https://web.archive.org/web/20101213050627/http://www.freefloat.com/sv/about-/about-.phphttps://www.exploit-db.com/exploits/15689https://www.exploit-db.com/exploits/23243https://www.vulncheck.com/advisories/freefloat-ftp-server-user-command-buffer-overflow