[UNIX] Vulnerability Found in Frox Transparent FTP Proxy

From: support@securiteam.com
Date: 01/14/02 

From: support@securiteam.com
To: list@securiteam.com
Date: Mon, 14 Jan 2002 14:27:43 +0100 (CET)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -

  Vulnerability Found in Frox Transparent FTP Proxy
------------------------------------------------------------------------

SUMMARY

 <http://frox.sourceforge.net/> Frox is a transparent FTP proxy
application. A security vulnerability in the product allows remote
attackers to gain privileged access (access rights equal to that of the
Frox's running user) by overflowing an internal buffer.

DETAILS

Vulnerable systems:
Frox versions 0.6.0 through 0.6.6

Immune systems:
Frox versions 0.6.7

There is an error in calculating the necessary size for a buffer into
which cache file header information is written when Frox is caching FTP
retrievals. This buffer is written into with sprintf, and may overflow if
a hostile FTP server returns a long string in reply to an MDTM request
when retrieving a file with a long pathname. This could allow arbitrary
code to be executed as the user under which Frox is running (normally not
root).

Solution:
Upgrade to the latest version of Frox.

ADDITIONAL INFORMATION

The information has been provided by <mailto:frox@hollo.org> James
Hollingshead.

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

Relevant Pages