Secunia

Leon Juranic has reported two vulnerabilities in Crob FTP Server, which can be exploited by malicious users to compromise a vulnerable system.

1) A boundary error in the argument handling can be exploited to cause a stack-based buffer overflow by e.g. sending the "STOR" command followed by the "RMD" command with specially crafted overly long arguments.

Successful exploitation allows execution of arbitrary code.

2) A boundary error in the handling of certain characters can be exploited to cause a heap-based buffer overflow by sending e.g. the "LIST" or "NLST" command with a specially crafted overly long argument.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities have been reported in version 3.6.1. Other versions may also be affected.

Solution
Grant only access to trusted users.
Further details available in Customer Area

Provided and/or discovered by
Leon Juranic, LSS Security

Changelog
Further details available in Customer Area

Original Advisory
http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-06-06

Deep Links
Links available in Customer Area