4D WebStar < 5.3.3 FTP Pre-Authentication Overflow

Critical Nessus Network Monitor Plugin ID 2170

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote server is running 4D WebStar. There is a buffer overflow condition in the FTP server module of the remote version of this software. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of the FTP server (root).

Solution

Upgrade to 4D WebStar 5.3.3 or higher.

See Also

http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0005.html

Plugin Details

Severity: Critical

ID: 2170

Family: Web Servers

Published: 2004/08/30

Modified: 2016/01/19

Dependencies: 1442

Nessus ID: 14195

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSSv3

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Exploitable With

Metasploit (WebSTAR FTP Server USER Overflow)

Reference Information

CVE: CVE-2004-0695

BID: 10720