Gene6 FTP Server Multiple Command Remote Overflows
High Nessus Plugin ID 21324
SynopsisThe remote FTP server is affected by buffer overflow flaws.
DescriptionThe remote host appears to be using Gene6 FTP Server, a professional FTP server for Windows.
According to its banner, the version of Gene6 FTP Server installed on the remote host contains buffer overflow vulnerabilities that can be exploited by an authenticated, possibly anonymous, user with specially crafted 'MKD', 'RMD', 'XMKD', and 'XRMD' commands to crash the affected application or execute arbitrary code on the affected host.
SolutionUpgrade to Gene6 FTP Server version 3.8.0 or later.