medium6.5Public exploit code
CVE-2006-2027
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, al…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Quick 'n EasY 2.4 FTP Server - Remote Denial of Service2004-10-24 · dos · windows · Verified
Impact
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when an admin selects the Logging section in the FTP server main window. NOTE: the original researcher claims that the vendor disputes this issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pablo Software Solutions | Quick N Easy Ftp Server | Version 3.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/788
- http://www.osvdb.org/25235
- http://www.securityfocus.com/archive/1/431920/100/0/threaded
- http://www.securityfocus.com/bid/17681
- http://securityreason.com/securityalert/788
- http://www.osvdb.org/25235
- http://www.securityfocus.com/archive/1/431920/100/0/threaded
- http://www.securityfocus.com/bid/17681