----------------------------------------------------------------------

Want a new IT Security job?

Vacant positions at Secunia:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Fastream NETFile FTP/Web Server FTP Bounce Vulnerability

SECUNIA ADVISORY ID:
SA15394

VERIFY ADVISORY:
http://secunia.com/advisories/15394/

CRITICAL:
Less critical

IMPACT:
Security Bypass

WHERE:
>From remote

SOFTWARE:
Fastream NETFile FTP/Web Server 7.x
http://secunia.com/product/4292/

DESCRIPTION:
Tan Chew Keong has reported a vulnerability in Fastream NETFile
FTP/Web Server, which potentially can be exploited by malicious users
to bypass certain security restrictions.

The vulnerability is caused due to missing validation of the IP
address specified as argument to the PORT command and can be
exploited via so-called "FTP Bounce" attacks to open connections to
arbitrary systems via the FTP server.

Successful exploitation may allow bypassing of firewall filters and
access systems, which would otherwise be unaccessible.

This can also be exploited further to cause a DoS (Denial of Service)
by uploading a specially crafted text file or access the admin
interface (port 30000/tcp).

The vulnerability has been reported in version 7.4.6. Other versions
may also be affected.

SOLUTION:
Update to version 7.6 and disable FXP support.

Grant only trusted users access to the FTP service.

PROVIDED AND/OR DISCOVERED BY:
Tan Chew Keong

ORIGINAL ADVISORY:
http://www.security.org.sg/vuln/netfileftp746port.html

OTHER REFERENCES:
CERT Advisory CA-1997-27 FTP Bounce:
http://www.cert.org/advisories/CA-1997-27.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------