FreeFloat FTP Server Arbitrary File Upload
63Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 9.3epss 1.5%
da publicação à arma0 dias
Publicada no NVD5 de ago.
metasploit7 de dez.
probabilidade de exploração
1.5%top 27% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or destination path. These conditions enable attackers to upload executable payloads and .mof files to locations such as system32 and wbem\mof, where Windows Management Instrumentation (WMI) automatically processes and executes them. This results in remote code execution with SYSTEM-level privileges, without requiring user interaction.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
FreeFloat · FTP ServerPoCs públicas encontradas — 2
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_wbem.rbnão verificadocve_referencewww.exploit-db.com/exploits/23226não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://archive.org/details/tucows_367516_Freefloat_FTP_Serverhttps://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_wbem.rbhttps://www.exploit-db.com/exploits/23226https://www.fortiguard.com/encyclopedia/ips/34209/freefloat-ftp-server-arbitrary-file-uploadhttps://www.vulncheck.com/advisories/freefloat-ftp-server-arbitrary-file-upload