Core FTP Filename Processing Boundary Error FTP List Command Response Parsing Remote Overflow

NASLDB: Core FTP Filename Processing Boundary Error FTP List Command Response Parsing Remote Overflow

General

ID: 59243
Name: Core FTP Filename Processing Boundary Error FTP List Command Response Parsing Remote Overflow

Summary: Checks version of Core FTP

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 139
Family: Windows
Type: Remote

Description

The version of Core FTP installed on the remote host is less than 2.2
build 1745. It thus is reportedly affected by a buffer overflow
vulnerability that can be triggered when it receives a specially
crafted FTP LIST command response.

By tricking a user into connecting to a malicious server, a remote
attacker may be able to execute arbitrary code on the affected host,
subject to the user’s privileges.