Detections
Analytics
MS09-053: Microsoft IIS FTPd NLST Command Remote Buffer Overflow (975191) (uncredentialed check)
critical Nessus Plugin ID 40825
Language:
Synopsis
The remote anonymous FTP server seems vulnerable to an arbitrary code execution attack.Description
The remote FTP server allows anonymous users to create directories in one or more locations.The remote version of this server is vulnerable to a buffer overflow attack in the NLST command which, when coupled with the ability to create arbitrary directories, may allow an attacker to execute arbitrary commands on the remote Windows host with SYSTEM privileges.
Solution
Microsoft has released a set of patches for IIS 5.0, 5.1, 6.0, and 7.0.See Also
https://www.nessus.org/u?ce9a6597
Plugin Details
Severity: Critical
ID: 40825
File Name: iis5_ftp_overflow.nasl
Version: 1.29
Type: remote
Family: FTP
Published: 10/13/2009
Updated: 8/5/2020
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2009-3023
Vulnerability Information
CPE: cpe:/a:microsoft:iis
Required KB Items: ftp/tested_writeable_dir
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/13/2009
Vulnerability Publication Date: 9/1/2009
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (MS09-053 Microsoft IIS FTP Server NLST Response Overflow)
Reference Information
CVE: CVE-2009-3023
BID: 36189