漏洞描述
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
www.vupen.comhttp://www.vupen.com/english/advisories/2008/0393↗secunia.comhttp://secunia.com/advisories/28760↗securityreason.comhttp://securityreason.com/securityalert/3639↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/487431/100/0/threaded↗www.securityfocus.comhttp://www.securityfocus.com/bid/27568↗