Intrusion PreventionFTP.USER.Command.Buffer.Overflow
Description
This indicates an attempt to exploit a buffer overflow vulnerability in some File Transfer Protocol (FTP) servers.
The vulnerability is due to inadequate user input validation of the "USER" command. A remote attacker can cause Denial of Service (DoS) on a vulnerable system by sending it a specially crafted FTP command.
Affected Products
Shadow Op Software Dragon Server versions 1.0 and 2.0
BlackMoon FTP Server versions prior to and including 1.5
FTP servers from other vendors are potentially vulnerable as well.
Impact
Denial of Service.
Recommended Actions
Apply the appropriate patches or upgrade the system to the latest non-vulnerable version.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-07-22 | 28.830 |
Modified
|
Name:FTP. USER. Command. Overflow:FTP. USER. Command. Buffer. Overflow |
| ID | 12923 |
| Created | Sep 11, 2006 |
| Updated | Jul 18, 2024 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 84.66% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Buffer Errors |