4D WebStar < 5.3.3 FTP Pre-Authentication Overflow

critical Nessus Network Monitor Plugin ID 2170

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote server is running 4D WebStar. There is a buffer overflow condition in the FTP server module of the remote version of this software. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of the FTP server (root).

Solution

Upgrade to 4D WebStar 5.3.3 or higher.

Plugin Details

Severity: Critical

ID: 2170

Family: Web Servers

Published: 8/30/2004

Updated: 3/6/2019

Nessus ID: 14195

Risk Information

VPR

Risk Factor: High

Score: 7.0

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:4d:webstar

Exploitable With

Metasploit (WebSTAR FTP Server USER Overflow)

Reference Information

CVE: CVE-2004-0695

BID: 10720

Detections

Analytics