Check Point Advisories

Preemptive Protection against Freefloat FTP Server Invalid Command Buffer Overflow

Check Point Reference:	CPAI-2011-128
Date Published:	5 Jan 2012
Severity:	High
Last Updated:	Saturday 01 January, 2011
Source:
Protection Provided by:
Who is Vulnerable?	Freefloat FTP Servers
Vulnerability Description	A buffer overflow vulnerability has been reported in Freefloat FTP Server.
Vulnerability Details	The vulnerability is due to insufficient validation while handling overly long FTP requests sent to the server. A remote attacker may exploit this vulnerability by sending a specially crafted command to an affected FreeFloat FTP server. Successful exploitation could allow an attacker to execute arbitrary code on the target server.