Intrusion Prevention

AbsoluteFTP.LIST.Command.Remote.Buffer.Overflow

Description

This indicates an attack attempt against a Buffer Overflow vulnerability in AbsoluteFTP.
The vulnerability is caused by an error when the software handles a specially crafted file name. It allows a remote attacker to execute arbitrary code.

Affected Products

AbsoluteFTP 1.9.6
AbsoluteFTP 2.2.10

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patches for this issue.

CVE References

CVE-2011-5164