freeFTPD PASS Command Buffer Overflow Vulnerability

  1. Network Vulnerabilities
  2. FTP
  3. freeFTPD PASS Command Buffer Overflow Vulnerability
Summary
The host is running FreeFTPD Server and is prone to buffer overflow vulnerability.
Impact
Successful exploitation allows remote attackers to crash an affected server, effectively denying service to legitimate users.
Solution
Upgrade to freeFTPd version 1.0.12 or later, For updates refer to http://www.freesshd.com/?ctt=download
Insight
The flaw is due to an improper handling of huge data in the 'PASS' command.
Affected
freeFTPd version 1.0.10 and prior.
Detection
Send the crafted FTP request and check server is dead or not.
References
Updated on 2017-03-28
Severity
Medium Severity
Classification
Related Vulnerabilities