 Reed Arvin has reported a vulnerability in BulletProof FTP Server, which can be exploited by malicious, local users to gain escalated privileges.
The vulnerability is caused due to the application invoking the help functionality with SYSTEM privileges when configured to run as a service. This can be exploited to execute arbitrary commands on a system with escalated privileges.
The vulnerability has been reported in version 2.4.0.31. Other versions may also be affected.
SOFTWARE:
BulletProof FTP 2.x
SOLUTION:
Do not run the FTP server as a service.
Grant only trusted users access to affected systems.
VERIFY ADVISORY:
http://secunia.com/advisories/15152/
Secunia Security Advisories
| 
Contribute :
Advanced Search :
Web Resources :
Polls :
File Repository
