Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WFTPD多个安全漏洞
Vulnerability Description
WFTPD是Windows平台下的FTP服务程序。 WFTPD包含多个漏洞，远程攻击者可以利用这些漏洞进行缓冲区溢出，或拒绝服务攻击。 WFTPD在处理命令缓冲区分配时存在问题，提交特殊请求可使WFTPD分配过多的内存，而导致拒绝服务攻击。 另外存在基于堆栈的缓冲区溢出。问题存在于FTP命令LIST，NLST和STAT的实现中。要利用这个漏洞，攻击者必须以合法用户验证，并且需要注册表中的Secure选项设置为0。由于程序对防止缓冲区溢出检查中存在一个逻辑错误，写超长字符串到本地缓冲区，可破坏进程的堆栈信息
CVSS Information
N/A
Vulnerability Type
N/A