Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wftpd | Texas_imperial_software | 3.0 (including) | 3.0 (including) |
| Wftpd | Texas_imperial_software | 3.0_0r3 (including) | 3.0_0r3 (including) |
| Wftpd | Texas_imperial_software | 3.0_0r4 (including) | 3.0_0r4 (including) |
| Wftpd | Texas_imperial_software | 3.0_0r5 (including) | 3.0_0r5 (including) |
| Wftpd | Texas_imperial_software | 3.10_r1 (including) | 3.10_r1 (including) |
| Wftpd | Texas_imperial_software | 3.20 (including) | 3.20 (including) |
| Wftpd | Texas_imperial_software | 3.21 (including) | 3.21 (including) |
| Wftpd | Texas_imperial_software | pro_3.10_r1 (including) | pro_3.10_r1 (including) |
| Wftpd | Texas_imperial_software | pro_3.20 (including) | pro_3.20 (including) |
| Wftpd | Texas_imperial_software | pro_3.21 (including) | pro_3.21 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=107801208004699\u0026w=2
- http://secunia.com/advisories/11001
- http://www.securityfocus.com/bid/9767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15340
- http://marc.info/?l=bugtraq\u0026m=107801208004699\u0026w=2
- http://secunia.com/advisories/11001
- http://www.securityfocus.com/bid/9767
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15340