Secunia

Sergio Alvarez has reported a vulnerability in NetTerm, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the NetFtpd program and can be exploited to cause a buffer overflow by passing an overly long argument to the "USER" FTP command when logging in.

Successful exploitation allows execution of arbitrary code.

An exploit is publicly available.

NOTE: This vulnerability has been rated as a "From local network" issue, since the vendor recommends customers to only use the NetFtpd program behind a firewall in a controlled environment and not as a general purpose FTP server.

Solution
The vendor has removed NetFtpd in NetTerm 5.1.1.1 and later.
Further details available in Customer Area

Provided and/or discovered by
Sergio Alvarez

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area