PT-2014-2299

CVE-2012-5106

Published

2014-06-20

Updated

2017-08-29

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeFloat FTP Server version 1.0

Description The issue is a stack-based buffer overflow that allows remote authenticated users to execute arbitrary code. This is achieved by sending a long string in a PUT command.

Recommendations For FreeFloat FTP Server version 1.0, update to a version that fixes this issue, as using a long string in the PUT command can lead to arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Gimppy042

Jacob Holcomb

Veerendra G.G

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers