Signature Detail

FTP: SIZE Command Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the WFTPD FTP daemon. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

WFTPD is prone to multiple buffer-overflow vulnerabilities because the application fails to do proper bounds checking on user-supplied data before storing it in finite-sized buffers. An attacker can exploit these issues to execute arbitrary code and gain unauthorized remote access to a computer. Attack attempts may cause denial-of-service conditions as well. WFTPD 3.23 is reported vulnerable; other versions may also be affected.

Affected Products

• Texas Imperial Software WFTPD 3.23

References

• BugTraq: 19617
• CVE: CVE-2006-4318