Vulnerability CVE-2006-2027
Published: 2006-04-25   Modified: 2012-02-12

Description:
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when an admin selects the Logging section in the FTP server main window. NOTE: the original researcher claims that the vendor disputes this issue.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Quick \'n Easy FTP Server pro/lite Logging unicode stack overflow
Kaveh Razavi (c0...
27.04.2006

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.5/10
6.4/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Pablo software solutions -> Quick n easy ftp server 

 References:
http://securityreason.com/securityalert/788
http://www.securityfocus.com/archive/1/431920/100/0/threaded
http://www.securityfocus.com/bid/17681
Copyright 2024, cxsecurity.com

 

Back to Top