Signature Detail

FTP: Easy FTP Server Command Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Easy FTP Server 1.7.0.11. Other versions may also be affected. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server. Because the size of the buffer for this exploit is small, this signature can create false positives on normal traffic from other FTP software. No recommended action is attached to this signature due to the risk of false positives on other FTP software. If you are using Easy FTP or UplusFTP, set the action to drop.

Extended Description

Easy FTP Server (AKA UplusFTP) is prone to multiple remote buffer-overflow vulnerabilities. Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Easy FTP Server 1.7.0.11 is vulnerable; other versions may also be affected.

Affected Products

• easy ftp server 1.7.0.11

References

• BugTraq: 42469
• URL: http://sourceforge.net/projects/easyftpsvr/
• URL: http://code.google.com/p/easyftpsvr/
• URL: http://www.erisesoft.com/en/uplusftp.php