|
A
vulnerability was found in GlobalScape Secure FTP Server version
3.0.2, which can be exploited by malicious users to compromise a
vulnerable system.
The
vulnerability is caused due to a boundary error when processing FTP
commands. By sending an overly long FTP command (more than 2043
bytes) to the FTP server, a stack-based buffer overflow can happen.
Exploits
are publicly available now and users are urged to upgrade to version
3.0.3 Build 4.29.2005 or later.
BroadWeb
Security Service Team (BSST) has released the countermeasure
signatures in signature version 2.88, which includes:
#
1051892_EXPLOIT GlobalScape Secure FTP Server 3.x Buffer Overflow
NetKeeper
users are urged to upgrade their signature patterns to version 2.88
or later in order to thwart these attacks.
(BSST,
Broadweb Security Service Team)
CVE
reference: CAN-2005-1415
Reference: http://www.hackingdefined.com/exploits/Globalscape30.pdf
|
