FTP: UplusFtp Server Multiple Commands Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Uplus FTP Server. A successful attack could result in arbitrary code execution with the privileges of the server. Failed exploit attempts could result in a denial of service condition.
Extended Description
UplusFtp (formerly Easy Ftp Server) is prone to multiple remote buffer-overflow vulnerabilities. Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. UplusFtp 1.7.0.12 is vulnerable; prior versions, including Easy Ftp Server, may also be affected.
Affected Products
Easy_ftp_server easy_ftp_server
Short Name
FTP:OVERFLOW:UPLUS-MULTI-CMDS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
FTP
Keywords
Buffer CVE-2015-7768 Commands Multiple Overflow Server UplusFtp bid:38102 bid:38262
Release Date
12/02/2012
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Easy_ftp_server
Uplusware
CVSS Score
7.5