Multiple Vulnerabilities in Cooolsoft PowerFTP 2.10

Reported February 13, 2002, by SNS Research.

VERSION AFFECTED

  • Cooolsoft PowerFTP Server 2.10 for Windows

 

DESCRIPTION

Several vulnerabilities exist in Cooolsoft’s PowerFTP 2.10 for Windows. The first vulnerability lets an attacker traverse the user directory by either a direct-path request (such as DIR C:\) or double-dot notation (such as DIR \..\*.*) and permits access to any file on the system. A second vulnerability results from the way the system stores all account information unencrypted in the ftpserver.ini file. Access to this file through the directory traversal vulnerability gives an intruder elevated privileges on the system. A third vulnerability involves a Denial of Service (DoS) attack condition created when the server receives a string of 2050 or more bytes.

 

VENDOR RESPONSE

 

The vendor, Cooolsoft, has been notified but hasn't issued a patch.

 

CREDIT
Discovered by SNS Research.

TAGS: Security
Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish