2344.txt

snort入侵检测规则文件2.4 Snort是众所周知的网络入侵检测工具

Rule:  

--
Sid:
2344

--
Summary:
This event is generated when an attempt is made to exploit a known
vulnerability in ArGoSoft FTP Server.

--
Impact:
Execution of arbitrary code. Possible unauthorized administrative access.

--
Detailed Information:
ArGoSoft FTP Server fails to perform sufficient checks on user supplied data to the
XCWD command. An attacker may exploit this vulnerability to execute code of
their choosing as the user running the process. This may lead to remote
administrative access to the server.

--
Affected Systems:
	ArGoSoft FTP Server 1.4.1 .1

--
Attack Scenarios:
An attacker may connect to the server and supply spurious data to the
XCWD command causing the overrun to occur.

--
Ease of Attack:
Simple.

--
False Positives:
None known.

--
False Negatives:
None known.

--
Corrective Action:
Apply the appropriate vendor supplied patches.

Upgrade to the latest non-affected version of the software.

--
Contributors:
Sourcefire Research Team
Brian Caswell <[e-mail]>
Nigel Houghton <[e-mail]>

-- 
Additional References:

--