Summary
This host has Null FTP Server installed and is prone to arbitrary code execution vulnerability.
Impact
Successful exploitation will allow attacker to execute arbitrary codes in the context of the application.
Impact Level: Application
Solution
Upgarde to the latest version 1.1.0.8 or later
http://www.vwsolutions.com/NullFTPServer/
Insight
An error is generated while handling custom SITE command containing shell metacharacters such as & (ampersand) as a part of an argument.
Affected
NULL FTP Server Free and Pro version prior to 1.1.0.8 on Windows
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2008-6534 -
CVSS Base Score: 7.1
AV:N/AC:H/Au:S/C:C/I:C/A:C
Related Vulnerabilities