FTP : freeFTPD PASS Command Buffer Overflow Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.803747

Category: FTP

Title: freeFTPD PASS Command Buffer Overflow Vulnerability

Summary: FreeFTPD Server is prone to a buffer overflow vulnerability.

Description: Summary:
FreeFTPD Server is prone to a buffer overflow vulnerability.

Vulnerability Insight:
The flaw is due to an improper handling of huge data in the 'PASS'
command.

Vulnerability Impact:
Successful exploitation allows remote attackers to crash an affected server,
effectively denying service to legitimate users.

Affected Software/OS:
freeFTPd version 1.0.10 and prior.

Solution:
Upgrade to freeFTPd version 1.0.12 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:L/Au:S/C:N/I:N/A:C

Copyright Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.803747
Category:	FTP
Title:	freeFTPD PASS Command Buffer Overflow Vulnerability
Summary:	FreeFTPD Server is prone to a buffer overflow vulnerability.
Description:	Summary: FreeFTPD Server is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to an improper handling of huge data in the 'PASS' command. Vulnerability Impact: Successful exploitation allows remote attackers to crash an affected server, effectively denying service to legitimate users. Affected Software/OS: freeFTPd version 1.0.10 and prior. Solution: Upgrade to freeFTPd version 1.0.12 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Copyright	Copyright (C) 2013 Greenbone AG