3Com 3CServer FTP Server < 2.0 Remote Overflow

Medium Nessus Network Monitor Plugin ID 2595

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is vulnerable to several remote overflows. An attacker exploiting these flaws would need to be able to log into the FTP server and run standard FTP commands. If anonymous access is enabled, the 'Anonymous' account would be sufficient to generate the overflow on the remote machine.

Solution

Upgrade to version 2.0 or higher.

Plugin Details

Severity: Medium

ID: 2595

File Name: 2595.prm

Family: FTP Servers

Published: 2005/02/07

Modified: 2016/01/21

Dependencies: 1803, 1804

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5

Temporal Score: 4.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

CVSSv3

Base Score: 5.3

Temporal Score: 5.2

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS3#E:F/RL:U/RC:X

Exploitable With

Metasploit (3Com 3CDaemon 2.0 FTP Username Overflow)

Reference Information

CVE: CVE-2005-0278, CVE-2005-0276, CVE-2005-0277

BID: 12155, 12463

OSVDB: 12810, 12811