CVE-1999-0911

Description

Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.

Affected products

• ProFTPD Project / ProFTPD1.2_pre1 – 1.2_pre1
• ProFTPD Project / ProFTPD1.2_pre2 – 1.2_pre2
• ProFTPD Project / ProFTPD1.2_pre3 – 1.2_pre3
• ProFTPD Project / ProFTPD1.2_pre4 – 1.2_pre4
• ProFTPD Project / ProFTPD1.2_pre5 – 1.2_pre5

Exploits & proofs of concept

• exploit-dbProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (2)by anonymous
• exploit-dbProFTPd 1.2 pre1/pre2/pre3/pre4/pre5 - Remote Buffer Overflow (1)by babcia padlina ltd

References

• MISChttp://www.securityfocus.com/bid/612
• VENDOR_ADVISORYhttp://www.debian.org/security/1999/19990210