This host is installed with FTPGetter FTP Client and is prone to buffer overflow vulnerability.

Successful exploitation allows execution of arbitrary code. Impact Level: System/Application.

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.

The flaw is due to a boundary error when reading a log file using fgets() which can be exploited to cause a stack-based buffer overflow by tricking a user into connecting to a malicious FTP server and sending a specially crafted 'PWD' or 'PASV' response.

FTPGetter version 3.58.0.21 and prior.

• http://downloads.securityfocus.com/vulnerabilities/exploits/46120.py
• http://www.exploit-db.com/exploits/16101/
• https://secunia.com/advisories/41857

---

Updated on 2015-03-25