OSVDB ID: 20530 Title: Linux-ftpd-ssl FTP Server Response Remote Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
A remote overflow exists in linux-ftpd-ssl. The SSL code fails to validate input to the vsprintf() function resulting in a stack-based buffer overflow. With a specially crafted request which generates more than 2048 bytes of response from the server, a remote attacker can cause arbitrary code execution resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, James Longstreet has released an unofficial patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|
gmx.net -