Some vulnerabilities have been discovered in WinFTP, which can be exploited by malicious users to cause a DoS (Denial of Service) or to compromise a vulnerable system.

1) An error exists in the handling of the PASV command. This can potentially be exploited to crash the service by sending multiple login requests ending with the PASV command.

2) A boundary error in the included mfc42.dll library can be exploited to cause a heap-based buffer overflow via e.g. a specially crafted LIST command.

For more information:
SA26800

Successful exploitation of this vulnerability may allow execution of arbitrary code.

The vulnerabilities are confirmed in version 2.3.0. Other versions may also be affected.

Solution
Grant access to trusted users only.

Provided and/or discovered by
1) dmnt
2) joe walko

Changelog
Further details available in Customer Area

Original Advisory
1) http://milw0rm.com/exploits/6717
2) http://milw0rm.com/exploits/7875

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area