RhinoSoft Serv-U FTP Server MDTM Command Time Argument Buffer Overflow Vulnerability

Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command.

The problem exists due to insufficient bounds checking. Ultimately an attacker may leverage this issue to have arbitrary instructions executed in the context of the SYSTEM user.


Privacy Statement
Copyright 2010, SecurityFocus