search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Golden FTP server contains a buffer overflow

Vulnerability Note VU#620862

Original Release Date: 2005-02-25 | Last Revised: 2005-02-25

Overview

Golden FTP server contains a buffer overflow that may allow a remote attacker to execute arbitrary code.

Description

Golden FTP server is a personal FTP server for the Microsoft Windows platform. The RNTO (rename to) command is used in conjunction with the RNFR (rename from) to rename a file on the server. Specifically, RNFR is used to specify the current name of the file, and RNTO is used to specify the new name for the file. If a remote unauthenticated attacker sends a specially crafted rename request (RNFR and RNTO) to a vulnerable Golden FTP server, they may be able to trigger a buffer overflow vulnerability in the routine that handles RNTO commands.

Please note that an exploit for this vulnerability is publicly available.

Impact

A remote unauthenticated attacker may be able to execute arbitrary code with the privileges of the Golden FTP server.

Solution

Upgrade

According to the developers of Golden FTP server, this issue has been corrected in Golden FTP server version 2.05b

Vendor Information

620862
 
Affected   Unknown   Unaffected

KMiNT21 Software

Updated:  February 25, 2005

Status

  Vulnerable

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A

References

Acknowledgements

Thanks to barabas mutsonline for reporting this vulnerability.

This document was written by Lucy Crocker.

Other Information

CVE IDs: None
Severity Metric: 17.25
Date Public: 2005-01-22
Date First Published: 2005-02-25
Date Last Updated: 2005-02-25 16:49 UTC
Document Revision: 59

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.