Freefloat FTP Server "LIST" Command Remote Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
Freefloat FTP Server
Description:
--------------------------------------------------------------------------------
Bugtraq id: 48630

Freefloat FTP Server is a free software for uploading files and managing wired and wireless devices.

The Freefloat FTP Server has a remote buffer overflow vulnerability in the implementation of the LIST Command. Remote attackers can exploit this vulnerability to execute arbitrary code or cause a denial of service in the affected applications.

<* Source: Zer0 Thunder
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://www.securityfocus.com/data/vulnerabilities/exploits/48630.py

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Freefloat
---------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.freefloat.com/