Secunia

Some vulnerabilities have been discovered in Mabry Software FTPServer/X, which can be exploited by malicious users to crash a vulnerable FTP server and potentially compromise it.

The vulnerabilities are caused due to boundary errors when processing arguments passed to various commands. This can be exploited to cause a buffer overflow by supplying an overly long argument (about 270 bytes) to the following commands:

- CWD
- STAT
- MKD
- XMKD
- RMD
- NLST

Secunia has confirmed the vulnerabilities in FTPServer/X versions 1.00.047 and 1.00.056. The vulnerabilities have also been reported in Mollensoft FTP Server (formerly Hyperion FTP Server) versions 3.5.2 and 3.6.0. Other versions may also be affected.

NOTE: Any FTP server based on the vulnerable component is likely affected.

Solution
Grant only trusted users access to affected FTP servers.
Further details available in Customer Area

Provided and/or discovered by
dr_insane

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area