bugtraq - SamiFTPd buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20060124195819.1491.qmail@securityfocus.com>
Date: 24 Jan 2006 19:58:19 -0000
From: admin@...tical.lt
To: bugtraq@...urityfocus.com
Subject: SamiFTPd buffer overflow


Sami FTP server buffer overflow
Critical Security advisory #007 - 2006-01-24 16:20:08

Product: Sami FTP 2.0.1 
Vuln type: Stack based buffer overflow 
Risk:  Moderate
Attack: Remote 
Original advisory: http://www.critical.lt/?vulnerabilities/208

Sami FTP Server buffer overflow vulnerability 

Product site: http://www.karjasoft.com/samiftp 

Server is affected by a buffer overflow due to insufficient sanitization of user input, vulnerable parameter - USER. Vulnerability 
is triggered when someone tries to view server log. 

Proof Of Concept code execution exploit: 
http://www.critical.lt/research/sami_ftp_poc.txt