WFTPD <= 3.23 Multiple Command Remote Overflow
medium Nessus Network Monitor Plugin ID 3733
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
The remote host is vulnerable to a buffer overflow.Description
The remote WFTP server vulnerable to a remote buffer overflow. The server allegedly does not properly parse and verify input to the 'CWD', 'DELE', 'APPE', 'MDTM', 'MKD', 'RMD', 'MLST', 'RNFR', 'SIZE', 'XCWD', 'XMKD', and XRMD commands. An attacker exploiting this flaw would need to be able to authenticate to the FTP server. Successful exploitation would result in the attacker executing arbitrary code on the WFTP server.Solution
No solution is known at this time.See Also
Plugin Details
Severity: Medium
ID: 3733
Family: FTP Servers
Published: 8/21/2006
Updated: 3/6/2019
Risk Information
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Temporal Vector: CVSS2#E:F/RL:OF/RC:ND
CVSS v3
Risk Factor: Medium
Base Score: 5.9
Temporal Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:X
Vulnerability Information
CPE: cpe:2.3:a:texas_imperial_software:wftpd:*:*:*:*:*:*:*:*
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Texas Imperial Software WFTPD 3.23 SIZE Overflow)
Reference Information
CVE: CVE-2006-4318, CVE-2006-5826