From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Jan 09 2004 - 16:05:55 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Windows Ftp Server Format String Vulnerability

SECUNIA ADVISORY ID:
SA10589

VERIFY ADVISORY:
http://www.secunia.com/advisories/10589/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
From remote

SOFTWARE:
Windows Ftp Server 1.x

DESCRIPTION:
Peter Winter-Smith has reported a vulnerability in Windows Ftp
Server, which can be exploited by malicious people to cause a DoS
(Denial of Service) and potentially compromise a vulnerable system.

The vulnerability is caused due to a format string error when
processing client data. This can e.g. be exploited by supplying a
specially crafted username containing format specifiers when
attempting to log in.

Successful exploitation may crash the process or potentially allow
execution of arbitrary code.

The vulnerability has been reported in version 1.6 and prior.

NOTE: This is not the default FTP server included in some versions of
the Microsoft Windows operating system.

SOLUTION:
Restrict traffic to the service, allowing only trusted IP addresses
to connect.

Filter malicious characters and character sequences in a FTP proxy.

Use another product.

PROVIDED AND/OR DISCOVERED BY:
Peter Winter-Smith

ORIGINAL ADVISORY:
http://www.elitehaven.net/winftpserver.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://www.secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://www.secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]