Secunia

muts has discovered a vulnerability in Ability Server, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the handling of the FTP "STOR" and "APPE" commands. This can be exploited to cause a buffer overflow by supplying an overly long argument.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been confirmed on version 2.34 and has also been reported in version 2.25 and 2.32. Other versions may also be affected.

Solution
Grant only trusted users access to the FTP server.

Provided and/or discovered by
Originally discovered by:
muts

Reported in "APPE" FTP command by:
PnK::DCN3T

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area