|
ProFTPD ASCII File Transfer Buffer Overrun Vulnerability
A remotely exploitable buffer overrun vulnerability has been reported in ProFTPD. This issue could be triggered if an attacker uploads a malformed file and then that file is downloaded in ASCII mode. Successful exploitation will permit a malicious FTP user with upload access to execute arbitrary code in the context of the FTP server. It is also reported that ProFTPD does not adequately drop privileges in some circumstances, which may compound the risks associated with exploitation. This issue could also affect versions prior to 1.2.7, though this has not been confirmed. |
|
|
Privacy Statement |
