Re: [Plugins-writers] GlobalSCAPE Secure FTP Server User Input Overflow nasl script

Previous message: Gareth Phillips: "[Plugins-writers] GlobalSCAPE Secure FTP Server User Input Overflow nasl script"
In reply to: Gareth Phillips: "[Plugins-writers] GlobalSCAPE Secure FTP Server User Input Overflow nasl script"
Next in thread: Renaud Deraison: "Re: [Plugins-writers] GlobalSCAPE Secure FTP Server User Input Overflow nasl script"
Reply: Renaud Deraison: "Re: [Plugins-writers] GlobalSCAPE Secure FTP Server User Input Overflow nasl script"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

theall@private

On Wed, Jul 06, 2005 at 12:15:07PM +0200, Gareth Phillips wrote:

> GlobalSCAPE Secure FTP Server 3.0.2 and prior versions are affected by a
> buffer overflow found in the user-supplied input. An attacker must first be
> authenticated to the server before they can execute arbitrary commands.
> 
> References:
> - http://www.securityfocus.com/bid/13454

This vulnerability is covered by ftp_overflows.nasl (plugin #10084),
which tests generically for such overflows.

George
-- 
theall@private
_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers