Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.

The remote ProFTPd server is vulnerable to a buffer overflow when issued a too long mkdir command. An attacker may use this flaw to execute arbitrary commands on the remote host.

It was possible to crash the remote FTP server by issuing a specially crafted command, such as 'NLST aaaXXXX%u%[...]%u%u%u%%u%653300u%n' where 'XXXX' is replaced with four characters - ASCII values 0xDC, 0x4F, 0x07 and 0x08. This issue is known to affect ProFTPD version 1.2.0pre6, although other FTP servers may be affected as well.

It is likely that a remote attacker can leverage this issue to execute arbitrary code on the remote host, subject to the privileges under which the service runs.

It is possible to crash the remote FTP service by creating a large number of nested directories with names no longer than 255 chars. This issue is known to affect ProFTPD, although other FTP servers may be affected as well.

It is likely that a remote attacker can leverage this issue to execute arbitrary code on the remote host, subject to the privileges under which the service runs.

It was possible to crash the remote FTP server by creating a large number of nested directories and then trying to upload a file.  This issue is known to affect ProFTPD, although other FTP servers may be affected as well. 

It is likely that a remote attacker can leverage this issue to execute arbitrary code on the remote host, subject to the privileges under which the service runs.

ID	Name	Product	Family	Severity
1843	ProFTPd < 1.2.0pre6 mkdir Command Overflow	Nessus Network Monitor	FTP Servers	critical
10191	ProFTPD NLST Command Argument Handling Remote Overflow	Nessus	FTP	critical
10189	ProFTPD mkdir Buffer Overflow	Nessus	FTP	critical
10190	ProFTPD 1.2.0pre4 mkdir Command Directory Name Handling Remote Overflow	Nessus	FTP	critical

Detections

Analytics

CVE-1999-0911

critical

Tenable Plugins

critical

critical

critical

critical