Summary
It was possible to make the remote host
crash by issuing this FTP command :
CEL aaaa(...)aaaa
This problem is similar to the 'aix ftpd' overflow but on embedded vxworks based systems like the 3com nbx IP phone call manager and seems to cause the server to crash.
Solution
If you are using an embedded vxworks
product, please contact the OEM vendor and reference WindRiver field patch TSR 296292. If this is the
3com NBX IP Phone call manager, contact 3com.
This affects VxWorks ftpd versions 5.4 and 5.4.2
For more information, see CERT VU 317417
http://www.kb.cert.org/vuls/id/317417
or full security alert at
http://www.secnap.net/security/nbx001.html
Severity
Classification
-
CVE CVE-2002-2300 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apple QuickTime Malformed .mov File Buffer Overflow Vulnerability
- AT-TFTP Server Long Filename BoF Vulnerability
- Google Chrome Multiple Denial of Service Vulnerabilities - January12 (Windows)
- 7-Zip Unspecified Archive Handling Vulnerability (Win)
- Google Chrome Multiple Denial of Service Vulnerabilities - March12 (Linux)