vendor:
Golden FTP Server Pro
by:
c0d3r
9
CVSS
CRITICAL
Remote stack buffer overflow
119
CWE
Product Name: Golden FTP Server Pro
Affected Version From: 2.5.0.0
Affected Version To: 2.5.0.0
Patch Exists: NO
Related CWE:
CPE: golden-ftp-server-pro
Platforms Tested: Windows XP
2005
Golden FTP Server Pro remote stack BOF exploit
This exploit allows an attacker to execute arbitrary code on a vulnerable Golden FTP Server Pro version 2.5.0.0 and prior. By sending a specially crafted overflow string to the server, an attacker can gain a shell on port 4444. The exploit has been tested on Windows XP SP1 and SP2. Restarting the server is required after the exploit is successful. The workaround is to upgrade to a newer version or use another FTP server.
Mitigation:
Upgrade to a newer version or use another FTP server.